Starshine_Legacy_1_Mystery_of_the_Soulriders_Win_ISO_EN[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Starshine_Legacy_1_Mystery_of_the_Soulriders_Win_ISO_EN.zip
Size

287.1MB
MD5

67802ca2bb55f4cda46cb12a91a6efe1
SHA1

a50d53a6e69b01f6bdeae8014f530de91663f1b2
SHA256

b51b46f1498ac19b32ac77710ada1a9552d7344b2b10527e98e6f83e1938e1a1
SHA512

30dae3b8c226de9970f96053f2dd096763b9cdea6759fc29f7d67ddfd0b27fe712961d44c4106acc47be953832e043b34acae2d692030313f7b1bc332afaf084
SSDEEP

6291456:TwJ6F48o/OqzOzxOIzZyvR6eIk46jp++RLjz3nAUQU5:TwJ6FhqksCZYR6eImjDZbQU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 166 IoCs

Checks for missing Authenticode signature.

resource
unpack003/MSDvbNP.ax
unpack003/MSVidCtl.dll
unpack003/Mpeg2Data.ax
unpack003/bdaplgin.ax
unpack003/bdasup.sys
unpack003/ccdecode.sys
unpack003/ipsink.ax
unpack003/kstvtune.ax
unpack003/kswdmcap.ax
unpack003/ksxbar.ax
unpack003/mpe.sys
unpack003/msdv.sys
unpack003/msdv98se.sys
unpack003/msyuv.dll
unpack003/nabtsfec.sys
unpack003/ndisip.sys
unpack003/psisdecd.dll
unpack003/psisrndr.ax
unpack003/slip.sys
unpack003/streamip.sys
unpack003/vbisurf.ax
unpack003/wstcodec.sys
unpack003/wstdecod.dll
unpack004/MSDvbNP.ax
unpack004/MSVidCtl.dll
unpack004/MSVidCtl.w2k
unpack004/Mpeg2Data.ax
unpack004/bdaplgin.ax
unpack004/bdasup.sys
unpack004/ccdecode.sys
unpack004/ipsink.ax
unpack004/kstvtune.ax
unpack004/kswdmcap.ax
unpack004/ksxbar.ax
unpack004/mpe.sys
unpack004/msdv.sys
unpack004/msyuv.dll
unpack004/nabtsfec.sys
unpack004/ndisip.sys
unpack004/psisdecd.dll
unpack004/psisrndr.ax
unpack004/slip.sys
unpack004/streamip.sys
unpack004/vbisurf.ax
unpack004/wstcodec.sys
unpack004/wstdecod.dll
unpack005/BdaSup.sys
unpack005/MSDvbNP.ax
unpack005/MSVidCtl.dll
unpack005/Mpeg2Data.ax
unpack005/bdaplgin.ax
unpack005/ccdecode.sys
unpack005/ipsink.ax
unpack005/kstvtune.ax
unpack005/kswdmcap.ax
unpack005/ksxbar.ax
unpack005/mpe.sys
unpack005/msdv.sys
unpack005/msyuv.dll
unpack005/nabtsfec.sys
unpack005/ndisip.sys
unpack005/psisdecd.dll
unpack005/psisrndr.ax
unpack005/slip.sys
unpack005/streamip.sys
unpack005/vbisurf.ax
unpack005/wstcodec.sys
unpack005/wstdecod.dll
unpack006/amstream.dll
unpack006/d3d8.dll
unpack006/d3d9.dll
unpack006/d3dim.dll
unpack006/d3dim700.dll
unpack006/d3dpmesh.dll
unpack006/d3dramp.dll
unpack006/d3drm.dll
unpack006/d3dxof.dll
unpack006/ddhelp.exe
unpack006/ddraw.dll
unpack006/ddrawex.dll
unpack006/devenum.dll
unpack006/diactfrm.dll
unpack006/dimap.dll
unpack006/dinput.dll
unpack006/dinput8.dll
unpack006/dmband.dll
unpack006/dmcompos.dll
unpack006/dmime.dll
unpack006/dmloader.dll
unpack006/dmscript.dll
unpack006/dmstyle.dll
unpack006/dmsynth.dll
unpack006/dmusic.dll
unpack006/dmusic32.dll
unpack006/dplaysvr.exe
unpack006/dplayx.dll
unpack006/dpmodemx.dll
unpack006/dpnaddr.dll
unpack006/dpnet.dll
unpack006/dpnhpast.dll
unpack006/dpnhupnp.dll
unpack006/dpnlobby.dll
unpack006/dpnsvr.exe
unpack006/dpvacm.dll
unpack006/dpvoice.dll
unpack006/dpvsetup.exe
unpack006/dpvvox.dll
unpack006/dpwsockx.dll
unpack006/dsdmo.dll
unpack006/dsdmoprp.dll
unpack006/dsound.dll
unpack006/dsound3d.dll
unpack006/dswave.dll
unpack006/dx7vb.dll
unpack006/dx8vb.dll
unpack006/dxapi.sys
unpack006/dxdiag.exe
unpack006/dxdiagn.dll
unpack006/dxdllreg.exe
unpack006/dxtmsft.dll
unpack006/dxtrans.dll
unpack006/encapi.dll
unpack006/gameenum.sys
unpack006/gcdef.dll
unpack006/gchand.dll
unpack006/hidgame.sys
unpack006/joy.cpl
unpack006/ks.sys
unpack006/ks98.sys
unpack006/ksolay.ax
unpack006/ksproxy.ax
unpack006/ksse.sys
unpack006/ksuser.dll
unpack006/l3codecx.ax
unpack006/mciqtz32.dll
unpack006/migrate.dll
unpack006/mpg2splt.ax
unpack006/msdmo.dll
unpack006/mskssrv.sys
unpack006/mspclock.98
unpack006/mspclock.se
unpack006/mspclock.sys
unpack006/mstee.sys
unpack006/mswebdvd.dll
unpack006/pid.dll
unpack006/qasf.dll
unpack006/qcap.dll
unpack006/qdv.dll
unpack006/qdvd.dll
unpack006/qedit.dll
unpack006/qedwipes.dll
unpack006/quartz.dll
unpack006/stream.sys
unpack006/stream98.sys
unpack006/swenum.sys
unpack006/swenum98.sys
unpack006/swenumse.sys
unpack007/microsoft.directx.audiovideoplayback.dll
unpack007/microsoft.directx.diagnostics.dll
unpack007/microsoft.directx.direct3d.dll
unpack007/microsoft.directx.direct3dx.dll
unpack007/microsoft.directx.directdraw.dll
unpack007/microsoft.directx.directinput.dll
unpack007/microsoft.directx.directplay.dll
unpack007/microsoft.directx.directsound.dll
unpack007/microsoft.directx.dll

Files

Starshine_Legacy_1_Mystery_of_the_Soulriders_Win_ISO_EN.zip
.zip
Starshine_Legacy_1_Mystery_of_the_Soulriders_Win_ISO_EN/Game Files/KoleckOLP.nfo
Starshine_Legacy_1_Mystery_of_the_Soulriders_Win_ISO_EN/Game Files/Star Shine Legacy 1.iso
.iso
Autorun.inf
DirectX/BDA.cab
.cab
MSDvbNP.ax
.dll regsvr32 windows:5 windows x86 arch:x86

bd61e5a03c0af93c60b30cf39184a4a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
CloseHandle
CreateThread
CreateEventA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
IsBadWritePtr
GetCurrentProcess
IsBadReadPtr
GetLastError
ResetEvent
WaitForSingleObject
SleepEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TerminateProcess
InitializeCriticalSection
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

wcscmp
??2@YAPAXI@Z
swscanf
memmove
??3@YAXPAX@Z

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegCreateKeyA

user32

wsprintfA
PeekMessageA
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageA

ole32

CoFreeUnusedLibraries
StringFromCLSID
CoCreateInstance
CoGetMalloc
CoUninitialize
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString
SysAllocString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.dll
.dll regsvr32 windows:5 windows x86 arch:x86

4cab68af3a9d463423ff5188da351b39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
DisableThreadLibraryCalls
lstrcpyA
lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
lstrcmpiA
lstrcpynA
GetShortPathNameA
GetModuleHandleA
FormatMessageA
CreateEventA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetLastError
LockResource
LoadResource
FindResourceA
CreateMutexA
SetEvent
ResetEvent
WaitForMultipleObjects
CreateThread
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
VirtualQuery
lstrlenA
VirtualProtect
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
HeapSize
IsBadWritePtr
VirtualAlloc
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
HeapReAlloc
HeapFree
MultiByteToWideChar
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrlenW
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemInfo
InterlockedExchange
HeapAlloc
RaiseException
GetCommandLineA
TlsSetValue
Sleep

ntdll

RtlUnwind

ole32

StringFromCLSID
CoCreateFreeThreadedMarshaler
ProgIDFromCLSID
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoUninitialize
StringFromGUID2

oleaut32

LoadRegTypeLi
VARIANT_UserMarshal
VARIANT_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
VARIANT_UserFree
BSTR_UserSize
SysFreeString
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
VARIANT_UserUnmarshal

user32

CharNextA
LoadStringA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
DispatchMessageA

advapi32

RegQueryValueA
RegSetValueA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA

rpcrt4

NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
NdrDllUnregisterProxy
NdrDllRegisterProxy
CStdStubBuffer_IsIIDSupported
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
NdrOleFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mpeg2Data.ax
.dll regsvr32 windows:5 windows x86 arch:x86

244f9b8f61fbb054334418ba678d871c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
WaitForMultipleObjects
LocalAlloc
LocalFree
CreateThread
LocalReAlloc
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
CreateEventA
GetThreadPriority
SetThreadPriority
GetModuleFileNameA
GetLastError
MultiByteToWideChar
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WaitForSingleObject
DeleteCriticalSection
GetCurrentProcess
lstrlenA
LoadLibraryA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA
GetCurrentThread

msvcrt

_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
malloc
free

winmm

timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent

advapi32

RegSetValueExA
RegCreateKeyA
RegSetValueA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA

user32

GetQueueStatus
wsprintfA
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
PostThreadMessageA
RegisterWindowMessageA

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bda.inf
bdaplgin.ax
.dll regsvr32 windows:5 windows x86 arch:x86

1dbce2677ed0e9df3b7a82b88863a3d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

??3@YAXPAX@Z
_vsnwprintf
??2@YAPAXI@Z

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

CoInitialize
CoCreateInstance
CoUninitialize
StringFromGUID2
CoFreeUnusedLibraries

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bdasetup.inf
bdasup.sys
.dll windows:5 windows x86 arch:x86

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BdaSup.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock

ntoskrnl.exe

ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
memmove

ks.sys

KsGetParent
KsAddItemToObjectBag
KsRemoveItemFromObjectBag
KsFreeObjectCreateItemsByContext
_KsEdit
KsCreateFilterFactory
KsMergeAutomationTables
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsPinGetParentFilter
KsFilterAddTopologyConnections
KsGetPinFromIrp
KsFilterCreatePinFactory

Exports

Exports

BdaCheckChanges
BdaCommitChanges
BdaCreateFilterFactory
BdaCreateFilterFactoryEx
BdaCreatePin
BdaCreateTopology
BdaDeletePin
BdaFilterFactoryUpdateCacheData
BdaGetChangeState
BdaInitFilter
BdaMethodCreatePin
BdaMethodCreateTopology
BdaMethodDeletePin
BdaPropertyGetControllingPinId
BdaPropertyGetPinControl
BdaPropertyNodeDescriptors
BdaPropertyNodeEvents
BdaPropertyNodeMethods
BdaPropertyNodeProperties
BdaPropertyNodeTypes
BdaPropertyPinTypes
BdaPropertyTemplateConnections
BdaStartChanges
BdaUninitFilter
BdaValidateNodeProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 211B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 896B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 768B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ccdecode.inf
ccdecode.sys
.sys windows:5 windows x86 arch:x86

d5977c633dbdac9c68f7e446e09a0a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ccdecode.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount
KefAcquireSpinLockAtDpcLevel

hal

ExAcquireFastMutex
KeQueryPerformanceCounter
ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 554B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9bda.cat
ipsink.ax
.dll regsvr32 windows:5 windows x86 arch:x86

9c828b85bafb7d0f5f2d6ab092d5473d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ReleaseMutex
WaitForSingleObject
GetVersionExA
ResetEvent
WaitForMultipleObjects
CreateThread
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
SetEvent
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WaitForSingleObjectEx
CreateEventA
GetLastError
Sleep
IsBadReadPtr
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement

msvcrt

rand
??3@YAXPAX@Z
??2@YAPAXI@Z
free
malloc
_snprintf

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

CoCreateInstance
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen

ksproxy.ax

KsSynchronousDeviceControl

iphlpapi

GetUniDirectionalAdapterInfo
GetIpAddrTable

wsock32

htons
WSAStartup
ioctlsocket
setsockopt
bind
closesocket

ws2_32

WSASocketA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kstvtune.ax
.dll windows:5 windows x86 arch:x86

373218214f1164b605815211c9b37c65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
FindResourceA
GetLastError
SizeofResource
InterlockedCompareExchange
Sleep
CreateFileA
InterlockedExchange
GetProfileIntA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LockResource
GetACP
MultiByteToWideChar
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA
InitializeCriticalSection

msvcrt

_purecall
??2@YAPAXI@Z
strtol
??3@YAXPAX@Z

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegSetValueExA

user32

DestroyWindow
DefWindowProcA
wvsprintfA
LoadStringW
GetWindowRect
ShowWindow
GetWindowLongA
GetDlgItemInt
wsprintfA
KillTimer
MessageBoxA
LoadStringA
CheckRadioButton
SetDlgItemTextA
SetDlgItemInt
InvalidateRect
SetWindowLongA
MoveWindow
CreateDialogParamA
GetDesktopWindow
SendMessageA
GetDlgItem
GetAsyncKeyState
PostMessageA
SetTimer
EnableWindow
SetWindowTextA
UpdateWindow

comctl32

ord17

ole32

CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries

oleaut32

VariantInit
VariantClear

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kswdmcap.ax
.dll regsvr32 windows:5 windows x86 arch:x86

95d6690a876714b701968430fd31ed5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
SetLastError
CreateThread
InitializeCriticalSection
ExitThread
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
WaitForSingleObjectEx
GetCurrentProcess
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
Sleep
lstrcmpA
lstrcpyA
lstrcpynA
CreateEventA
GetLastError
DeviceIoControl
GetOverlappedResult
MultiByteToWideChar
lstrlenA
GetVersionExA
TerminateProcess
CloseHandle

mfc42

ord823
ord825

msvcrt

sprintf
_purecall
_ftol
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
atoi
strtod

advapi32

RegSetValueExA
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

user32

SetTimer
KillTimer
wsprintfA
LoadImageA
ShowWindow
SetDlgItemTextA
GetWindowLongA
SetWindowLongA
CreateDialogParamA
MoveWindow
InvalidateRect
DestroyWindow
LoadStringA
LoadStringW
GetWindowRect
GetDesktopWindow
EnableWindow
SetDlgItemInt
MessageBoxA
IsWindowEnabled
GetDlgItemInt
SetRect
IsRectEmpty
SendMessageA
GetWindowTextA
SetWindowTextA
GetDlgItem

comctl32

InitCommonControlsEx

ole32

CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FilterHandleFromPin
PerformDataIntersection
PinFactoryIDFromPin
RedundantKsGetMultiplePinFactoryItems

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksxbar.ax
.dll windows:5 windows x86 arch:x86

5116cc2556341d796c2a80b165186825

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventA
IsBadWritePtr
CreateFileA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetACP
MultiByteToWideChar
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

_purecall
swprintf
wcstombs
??2@YAPAXI@Z
wcslen
??3@YAXPAX@Z

user32

LoadStringA
LoadStringW
GetWindowRect
wvsprintfA
MessageBoxA
SetRect
SetDlgItemTextA
SendMessageA
GetDlgItem
CheckRadioButton
EnableWindow
ShowWindow
DestroyWindow
GetDesktopWindow
InvalidateRect
MoveWindow
CreateDialogParamA
SetWindowLongA
GetWindowLongA

ole32

CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpe.inf
mpe.sys
.sys windows:5 windows x86 arch:x86

b709125e5196d69f577afdd8423729ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mpe.pdb

Imports

ntoskrnl.exe

KeTickCount
KeQuerySystemTime
KeInitializeSpinLock
ExAllocatePoolWithTag
ExFreePool
KeBugCheckEx
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv.sys
.sys windows:5 windows x86 arch:x86

86f2d51aaa296b59194197c28572822e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MSDV.pdb

Imports

ntoskrnl.exe

IofCallDriver
ExAllocatePoolWithTag
IoFreeIrp
IoAllocateIrp
KeWaitForSingleObject
KeSetEvent
ExFreePool
KeInitializeEvent
KeReleaseMutex
KeInitializeSpinLock
KeInitializeMutex
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
KeResetEvent
InterlockedExchange
ExQueueWorkItem
KeClearEvent
ObfDereferenceObject
MmMapLockedPages
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
IoCancelIrp
wcscpy
KeTickCount
KeBugCheckEx
KeDelayExecutionThread

hal

KfReleaseSpinLock
KeQueryPerformanceCounter
KeGetCurrentIrql
KfAcquireSpinLock

stream.sys

StreamClassStreamNotification
StreamClassRegisterAdapter
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassDeviceNotification

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 902B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv98se.sys
.sys windows:5 windows x86 arch:x86

c44f46939591a6629aae6b9d01b9dae7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msdv98se.pdb

Imports

ntoskrnl.exe

IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
ExAllocatePoolWithTag
IoAllocateIrp
KeInitializeMutex
IoAllocateMdl
MmBuildMdlForNonPagedPool
IoFreeMdl
KeReleaseMutex
ExFreePool
KeSetEvent
KeClearEvent
KeInitializeSpinLock
ExfInterlockedInsertTailList
ExfInterlockedRemoveHeadList
MmMapLockedPages
InterlockedDecrement
InterlockedIncrement
KeResetEvent
wcscpy
KeTickCount
KeBugCheckEx
KeDelayExecutionThread

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KeGetCurrentIrql

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassRegisterAdapter

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msyuv.dll
.dll windows:5 windows x86 arch:x86

317bb2a83416a509406d650a33ce001a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc

msvcrt

_ftol
wcscpy

gdi32

GetSystemPaletteEntries

user32

GetDesktopWindow
MessageBoxW
ReleaseDC
GetDC

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nabtsfec.inf
nabtsfec.sys
.sys windows:5 windows x86 arch:x86

49970d1ef884a17567a446f9fea4d52c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nabtsfec.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
ExFreePool
ObfDereferenceObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
RtlInitUnicodeString
ExAllocatePoolWithTag
KeRestoreFloatingPointState
KeSaveFloatingPointState
KeTickCount
KeBugCheckEx
KeInitializeEvent

hal

KfReleaseSpinLock
KfAcquireSpinLock
ExReleaseFastMutex
KeQueryPerformanceCounter
ExAcquireFastMutex

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1007B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ndisip.inf
ndisip.sys
.sys windows:5 windows x86 arch:x86

0a8485ddb79fcd7268b3706841e511d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ndisip.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
IoCreateDevice
IoCreateSymbolicLink
RtlInitUnicodeString
IofCompleteRequest

ndis.sys

NdisFreePacketPool
NdisMSetAttributesEx
NdisAllocateMemory
NdisFreeMemory
NdisAllocatePacket
NdisAdjustBufferLength
NdisAllocateSpinLock
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisFreePacket
NdisMRegisterMiniport
NdisInitializeWrapper
NdisFreeBufferPool
NdisAllocateBuffer
NdisFreeBuffer
NdisAllocatePacketPool
NdisAllocateBufferPool

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 768B - Virtual size: 708B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisdecd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

a63eb4bfb67dc3602cfc27e862114741

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcmpiA
IsDBCSLeadByte
lstrcpynA
HeapDestroy
lstrcpyA
lstrcatA
GetModuleFileNameA
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrlenW
LockResource
GetModuleHandleA
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
FlushFileBuffers
WideCharToMultiByte
MultiByteToWideChar
Sleep
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
GetShortPathNameA
EnterCriticalSection
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
GetACP
LocalFree
InterlockedExchange
TlsSetValue
GetCommandLineA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
ExitProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter

ntdll

RtlUnwind

winmm

timeGetTime

advapi32

RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA

user32

CharNextA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

oleaut32

SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
VariantCopy
VariantInit
SysAllocString
SysFreeString
VariantChangeType

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisrndr.ax
.dll regsvr32 windows:5 windows x86 arch:x86

89452c43805800f5fc649a24f8bcf44d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetACP
WideCharToMultiByte
GetModuleFileNameA
GetLastError
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
lstrlenA
LoadLibraryA
FreeLibrary
GetVersionExA

msvcrt

??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z

advapi32

RegSetValueA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

user32

wsprintfA
wvsprintfA

ole32

CoUninitialize
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slip.inf
slip.sys
.sys windows:5 windows x86 arch:x86

3f9db7809b38aa51c5daad51c58fe7a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

slip.pdb

Imports

ntoskrnl.exe

KeTickCount
ExFreePool
ExAllocatePoolWithTag
DbgBreakPoint
KeQuerySystemTime
KeInitializeSpinLock

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
streamip.inf
streamip.sys
.sys windows:5 windows x86 arch:x86

024e69c1aa1ed511e6751546ba958390

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

streamip.pdb

Imports

ntoskrnl.exe

IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
ObfReferenceObject
ObfDereferenceObject
KeInitializeSpinLock
RtlInitUnicodeString
DbgPrint
ExFreePool
KeTickCount
ExAllocatePoolWithTag

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassStreamNotification
StreamClassRegisterAdapter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 612B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vbisurf.ax
.dll regsvr32 windows:5 windows x86 arch:x86

ae48a05a15c768aaec63afcf3810c760

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
FreeLibrary
GetTickCount
InterlockedExchange
QueryPerformanceCounter
WaitForSingleObject
CloseHandle
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
ResetEvent
SetEvent
CreateEventA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
GetVersionExA

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wst_czec.fon
wst_engl.fon
wst_fren.fon
wst_germ.fon
wst_ital.fon
wst_span.fon
wst_swed.fon
wstcodec.inf
wstcodec.sys
.sys windows:5 windows x86 arch:x86

5e94d6115bae4fe6e2b87706af1a8293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wstcodec.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeQueryPerformanceCounter

ntoskrnl.exe

IoCreateSymbolicLink
ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
RtlInitUnicodeString

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstdecod.dll
.dll regsvr32 windows:5 windows x86 arch:x86

af4f8f6981ea7fd495566925fe5b0cf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
GetVersionExA
GetModuleHandleA
MulDiv
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

free
malloc
??2@YAPAXI@Z
sprintf
sscanf
??3@YAXPAX@Z

gdi32

CreateCompatibleDC
DeleteDC
CreateFontIndirectA
SetBkMode
DeleteObject
CreateDIBSection
SelectObject
SetTextColor
ExtTextOutA
SetBkColor
GetTextMetricsA
GetSystemPaletteEntries
GetDeviceCaps
GetTextColor

user32

LoadStringA
LoadStringW
GetWindowRect
GetDesktopWindow
DestroyWindow
InvalidateRect
CreateDialogParamA
SetWindowLongA
wsprintfA
SetRect
SetTimer
KillTimer
IsRectEmpty
ReleaseDC
GetDC
UnregisterClassA
SendMessageTimeoutA
DefWindowProcA
ShowWindow
CreateWindowExA
GetWindowLongA
GetWindowTextA
MessageBeep
IsDlgButtonChecked
GetDlgItem
SendMessageA
SetWindowTextA
CheckDlgButton
RegisterClassA
MoveWindow

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegDeleteKeyA

ole32

CoTaskMemFree
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/BDANT.cab
.cab
MSDvbNP.ax
.dll regsvr32 windows:5 windows x86 arch:x86

8d46331ee3af79cade97e0eb594f6089

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
CloseHandle
CreateThread
CreateEventW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
IsBadWritePtr
GetCurrentProcess
lstrcmpW
IsBadReadPtr
GetLastError
ResetEvent
WaitForSingleObject
SleepEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TerminateProcess
InitializeCriticalSection
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

wcscmp
??2@YAPAXI@Z
swscanf
memmove
??3@YAXPAX@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegCreateKeyW

user32

DispatchMessageW
MsgWaitForMultipleObjectsEx
wsprintfW
PeekMessageW
TranslateMessage

ole32

StringFromCLSID
CoInitialize
CoTaskMemAlloc
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoGetMalloc
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.dll
.dll regsvr32 windows:5 windows x86 arch:x86

0467516a475941daa18bfa5b1573ef90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
WideCharToMultiByte
GetTickCount
GetDriveTypeW
GetSystemDirectoryW
Sleep
IsValidLocale
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentProcessId
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
GetComputerNameA
LocalFree
LocalAlloc
CreateMutexA
VirtualQuery
GetSystemInfo
VirtualProtect
ReadFile
SetStdHandle
LCMapStringW
SetThreadExecutionState
FormatMessageW
IsBadReadPtr
GetOEMCP
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
SetFilePointer
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
HeapReAlloc
RaiseException
GetVersionExA
GetCommandLineA
TlsSetValue
DelayLoadFailureHook
CreateThread
WaitForMultipleObjects
ResetEvent
SetEvent
CreateMutexW
FindResourceW
LoadResource
LockResource
GetLastError
lstrlenA
MultiByteToWideChar
CloseHandle
ReleaseMutex
WaitForSingleObject
LCMapStringA
CreateEventW
GetModuleHandleW
GetShortPathNameW
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
LoadLibraryW
GetProcAddress
DeviceIoControl
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameW
lstrcatW
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
IsBadCodePtr
InterlockedExchange

ntdll

RtlUnwind

ole32

OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoGetMalloc
CoUninitialize
ProgIDFromCLSID
StringFromCLSID
StringFromGUID2
GetRunningObjectTable
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
HDC_UserSize
HDC_UserMarshal
HDC_UserUnmarshal
HDC_UserFree
HWND_UserSize
HWND_UserMarshal
HWND_UserUnmarshal
HWND_UserFree
CreateItemMoniker
CoCreateFreeThreadedMarshaler

oleaut32

SysFreeString
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserMarshal
VARIANT_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
OleCreatePictureIndirect
OleCreatePropertyFrame

user32

LoadStringW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjectsEx
MapWindowPoints
EqualRect
ReleaseDC
GetDC
IsWindow
CopyRect
SystemParametersInfoW
FillRect
SendMessageW
PostMessageW
GetWindowLongW
GetClientRect
SetTimer
KillTimer
GetKeyState
SetCursor
LoadImageW
RegisterClassExW
wsprintfW
LoadCursorW
PtInRect
IntersectRect
GetWindowRect
ReleaseCapture
SetCapture
GetDesktopWindow
DestroyWindow
SetFocus
IsChild
GetFocus
GetParent
ShowWindow
InvalidateRect
DefWindowProcW
SetWindowLongW
CreateWindowExW
BeginPaint
EndPaint
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
CallWindowProcW
CharNextW
GetClassInfoExW

advapi32

RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegQueryValueW
RegQueryValueExW
RegCreateKeyW
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
GetUserNameA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueW

gdi32

CreateDIBitmap
SelectObject
CreateCompatibleDC
GetDeviceCaps
CreateSolidBrush
DeleteObject
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
CreateRectRgnIndirect
DeleteDC

rpcrt4

NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubCall2
NdrStubForwardingFunction
NdrCStdStubBuffer_Release

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 903KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 693B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.w2k
.dll regsvr32 windows:5 windows x86 arch:x86

aa2c799825b6370b37645be920a8c847

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
DisableThreadLibraryCalls
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
lstrcpynW
GetShortPathNameW
GetModuleHandleW
FormatMessageW
CreateEventW
WaitForSingleObject
ReleaseMutex
CloseHandle
MultiByteToWideChar
lstrlenA
GetLastError
LockResource
LoadResource
FindResourceW
CreateMutexW
SetEvent
ResetEvent
WaitForMultipleObjects
CreateThread
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
VirtualQuery
GetModuleFileNameW
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
lstrcatW
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemInfo
InterlockedExchange
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
RaiseException
GetVersionExA
GetCommandLineA
TlsSetValue
Sleep

ntdll

RtlUnwind

ole32

StringFromCLSID
CoCreateFreeThreadedMarshaler
ProgIDFromCLSID
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoUninitialize
StringFromGUID2

oleaut32

LoadRegTypeLi
VARIANT_UserMarshal
VARIANT_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
VARIANT_UserFree
BSTR_UserSize
SysFreeString
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
VARIANT_UserUnmarshal

user32

CharNextW
LoadStringW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjectsEx

advapi32

RegQueryValueW
RegSetValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

rpcrt4

NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
CStdStubBuffer_QueryInterface
NdrOleFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mpeg2Data.ax
.dll regsvr32 windows:5 windows x86 arch:x86

fcd4181f9417f53d1b10aa6fcfd706a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
WaitForMultipleObjects
LocalAlloc
LocalFree
CreateThread
LocalReAlloc
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
CreateEventW
GetThreadPriority
SetThreadPriority
lstrcpynW
lstrcpyW
lstrcmpW
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
LoadLibraryW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW
GetCurrentThread

msvcrt

malloc
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
free
_purecall

winmm

timeBeginPeriod
timeEndPeriod
timeSetEvent
timeKillEvent

advapi32

RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

user32

GetQueueStatus
PostThreadMessageW
wsprintfW
MsgWaitForMultipleObjects
PeekMessageW
RegisterWindowMessageW
DispatchMessageW

ole32

CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bda.inf
bdaplgin.ax
.dll regsvr32 windows:5 windows x86 arch:x86

2d0c35dab4bdadc34717c640b941494f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
InterlockedIncrement
FreeLibrary
InterlockedDecrement

msvcrt

??3@YAXPAX@Z
_vsnwprintf
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoInitialize

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bdasup.sys
.dll windows:5 windows x86 arch:x86

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BdaSup.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock

ntoskrnl.exe

ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
memmove

ks.sys

KsGetParent
KsAddItemToObjectBag
KsRemoveItemFromObjectBag
KsFreeObjectCreateItemsByContext
_KsEdit
KsCreateFilterFactory
KsMergeAutomationTables
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsPinGetParentFilter
KsFilterAddTopologyConnections
KsGetPinFromIrp
KsFilterCreatePinFactory

Exports

Exports

BdaCheckChanges
BdaCommitChanges
BdaCreateFilterFactory
BdaCreateFilterFactoryEx
BdaCreatePin
BdaCreateTopology
BdaDeletePin
BdaFilterFactoryUpdateCacheData
BdaGetChangeState
BdaInitFilter
BdaMethodCreatePin
BdaMethodCreateTopology
BdaMethodDeletePin
BdaPropertyGetControllingPinId
BdaPropertyGetPinControl
BdaPropertyNodeDescriptors
BdaPropertyNodeEvents
BdaPropertyNodeMethods
BdaPropertyNodeProperties
BdaPropertyNodeTypes
BdaPropertyPinTypes
BdaPropertyTemplateConnections
BdaStartChanges
BdaUninitFilter
BdaValidateNodeProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 896B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 768B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ccdecode.inf
ccdecode.sys
.sys windows:5 windows x86 arch:x86

d5977c633dbdac9c68f7e446e09a0a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ccdecode.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount
KefAcquireSpinLockAtDpcLevel

hal

ExAcquireFastMutex
KeQueryPerformanceCounter
ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 554B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9bda.cat
dxbda.inf
ipsink.ax
.dll regsvr32 windows:5 windows x86 arch:x86

628f6874f78df4a7257166f9144f8a03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ReleaseMutex
WaitForSingleObject
GetVersionExA
ResetEvent
WaitForMultipleObjects
CreateThread
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
SetEvent
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WaitForSingleObjectEx
CreateEventA
GetLastError
Sleep
IsBadReadPtr
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

free
_snprintf
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
rand

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen

ksproxy.ax

KsSynchronousDeviceControl

iphlpapi

GetUniDirectionalAdapterInfo
GetIpAddrTable

wsock32

closesocket
bind
setsockopt
htons
WSAStartup
ioctlsocket

ws2_32

WSASocketA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kstvtune.ax
.dll windows:5 windows x86 arch:x86

339742cd268348bf0f492e75bf25f820

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

kstvtune.pdb

Imports

kernel32

LoadResource
FindResourceW
GetLastError
SizeofResource
InterlockedCompareExchange
Sleep
CreateFileW
InterlockedExchange
GetProfileIntW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LockResource
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrcmpW
lstrlenW
lstrcpynW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
DisableThreadLibraryCalls
GetVersionExW
InitializeCriticalSection

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcstol
_purecall

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegSetValueExW

user32

GetWindowRect
GetDesktopWindow
InvalidateRect
wsprintfW
KillTimer
MessageBoxW
LoadStringW
CheckRadioButton
SetDlgItemTextW
SetDlgItemInt
DefWindowProcW
ShowWindow
DestroyWindow
SendMessageW
GetWindowLongW
MoveWindow
CreateDialogParamW
SetWindowLongW
GetDlgItemInt
GetAsyncKeyState
UpdateWindow
PostMessageW
SetTimer
EnableWindow
SetWindowTextW
GetDlgItem

comctl32

ord17

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoUninitialize

oleaut32

VariantInit
VariantClear

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kswdmcap.ax
.dll regsvr32 windows:5 windows x86 arch:x86

a4d2e6643818292a0d8fef1ab511db26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObjectEx
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
SetLastError
CreateThread
InitializeCriticalSection
ExitThread
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
lstrlenW
GetCurrentProcess
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
Sleep
lstrcmpW
lstrcpyW
lstrcpynW
CreateEventW
GetLastError
DeviceIoControl
GetOverlappedResult
lstrlenA
MultiByteToWideChar
GetVersionExW
TerminateProcess
CloseHandle

mfc42

ord823
ord825

msvcrt

swprintf
_purecall
_ftol
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
sprintf
_wtoi
wcstod

advapi32

RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

user32

SetTimer
KillTimer
wsprintfW
LoadImageW
ShowWindow
SetDlgItemTextW
SetWindowTextA
GetWindowTextA
GetWindowLongW
SetWindowLongW
CreateDialogParamW
MoveWindow
InvalidateRect
DestroyWindow
LoadStringW
GetWindowRect
GetDesktopWindow
EnableWindow
SetDlgItemInt
MessageBoxW
IsWindowEnabled
GetDlgItemInt
SetRect
IsRectEmpty
SendMessageW
GetWindowTextW
GetDlgItem
SetWindowTextW

comctl32

InitCommonControlsEx

ole32

CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FilterHandleFromPin
PerformDataIntersection
PinFactoryIDFromPin
RedundantKsGetMultiplePinFactoryItems

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksxbar.ax
.dll windows:5 windows x86 arch:x86

86f7b1489e2283642a94ef3ffa08593e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventW
IsBadWritePtr
CreateFileW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
lstrcmpW
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

swprintf
??2@YAPAXI@Z
wcslen
_purecall
??3@YAXPAX@Z

user32

LoadStringW
GetWindowRect
GetDesktopWindow
MessageBoxW
SetRect
SetDlgItemTextW
SendMessageW
GetDlgItem
CheckRadioButton
EnableWindow
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW

ole32

CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpe.inf
mpe.sys
.sys windows:5 windows x86 arch:x86

b709125e5196d69f577afdd8423729ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mpe.pdb

Imports

ntoskrnl.exe

KeTickCount
KeQuerySystemTime
KeInitializeSpinLock
ExAllocatePoolWithTag
ExFreePool
KeBugCheckEx
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv.sys
.sys windows:5 windows x86 arch:x86

e105f7c92aa2bef9bddfa3b3765e6022

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msdv.pdb

Imports

ntoskrnl.exe

IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
ExAllocatePoolWithTag
IoAllocateIrp
KeInitializeMutex
IoAllocateMdl
MmBuildMdlForNonPagedPool
IoFreeMdl
KeReleaseMutex
ExFreePool
KeSetEvent
KeClearEvent
KeInitializeSpinLock
ExfInterlockedInsertTailList
ExfInterlockedRemoveHeadList
MmMapLockedPagesSpecifyCache
InterlockedDecrement
InterlockedIncrement
KeResetEvent
wcscpy
KeTickCount
KeBugCheckEx
KeDelayExecutionThread

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KeGetCurrentIrql

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassRegisterAdapter

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msyuv.dll
.dll windows:5 windows x86 arch:x86

317bb2a83416a509406d650a33ce001a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc

msvcrt

_ftol
wcscpy

gdi32

GetSystemPaletteEntries

user32

GetDesktopWindow
MessageBoxW
ReleaseDC
GetDC

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nabtsfec.inf
nabtsfec.sys
.sys windows:5 windows x86 arch:x86

49970d1ef884a17567a446f9fea4d52c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nabtsfec.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
ExFreePool
ObfDereferenceObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
RtlInitUnicodeString
ExAllocatePoolWithTag
KeRestoreFloatingPointState
KeSaveFloatingPointState
KeTickCount
KeBugCheckEx
KeInitializeEvent

hal

KfReleaseSpinLock
KfAcquireSpinLock
ExReleaseFastMutex
KeQueryPerformanceCounter
ExAcquireFastMutex

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ndisip.inf
ndisip.sys
.sys windows:5 windows x86 arch:x86

85b9203fdd9c0bd977642878e7918927

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ndisip.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
KeInitializeSpinLock
IoFreeMdl
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
DbgPrint
ZwSetValueKey
ZwClose
RtlInitUnicodeString
IofCompleteRequest

hal

KfReleaseSpinLock
KfAcquireSpinLock

ndis.sys

NdisAllocateMemory
NdisFreeMemory
NdisAllocatePacket
NdisAllocateBufferPool
NdisMSetAttributesEx
NdisAllocateBuffer
NdisFreeBufferPool
NdisFreePacketPool
NdisInitializeWrapper
NdisMRegisterMiniport
NdisAllocateSpinLock
NdisAllocatePacketPool
NdisReleaseSpinLock
NdisMDeregisterDevice
NdisAcquireSpinLock
NdisFreePacket
NdisMRegisterDevice

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 331B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 890B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisdecd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

030f2fd88c6befc4cc612bcee23289da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
lstrcpynW
HeapDestroy
lstrcatW
GetModuleFileNameW
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryW
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
GetShortPathNameW
LockResource
lstrcpyW
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
FlushFileBuffers
lstrlenW
MultiByteToWideChar
Sleep
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleW
EnterCriticalSection
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetCPInfo
GetOEMCP
WideCharToMultiByte
LocalFree
InterlockedExchange
TlsSetValue
GetCommandLineA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
ExitProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter
GetACP

ntdll

RtlUnwind

winmm

timeGetTime

advapi32

RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

user32

CharNextW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

oleaut32

SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysAllocString
SysFreeString
VarUI4FromStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisrndr.ax
.dll regsvr32 windows:5 windows x86 arch:x86

b3fabccc88441525f3d8a97e7abf70a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenA
MultiByteToWideChar
LoadLibraryW
FreeLibrary
lstrcmpW
lstrlenW
GetVersionExW
lstrcpynW

msvcrt

??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slip.inf
slip.sys
.sys windows:5 windows x86 arch:x86

3f9db7809b38aa51c5daad51c58fe7a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

slip.pdb

Imports

ntoskrnl.exe

KeTickCount
ExFreePool
ExAllocatePoolWithTag
DbgBreakPoint
KeQuerySystemTime
KeInitializeSpinLock

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
streamip.inf
streamip.sys
.sys windows:5 windows x86 arch:x86

937c5c9480c457813996610d24c3ca2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

streamip.pdb

Imports

ntoskrnl.exe

IoGetDeviceObjectPointer
ZwCreateFile
IoGetDeviceInterfaces
ObfReferenceObject
IoBuildDeviceIoControlRequest
KeTickCount
ZwClose
ObfDereferenceObject
KeInitializeSpinLock
RtlInitUnicodeString
DbgPrint
ExFreePool
IofCallDriver
ExAllocatePoolWithTag

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassStreamNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 647B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vbisurf.ax
.dll regsvr32 windows:5 windows x86 arch:x86

4ea881e9bc4888403a5e8628308bf315

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
InterlockedExchange
QueryPerformanceCounter
WaitForSingleObject
CloseHandle
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
lstrcmpW
CreateThread
ResetEvent
SetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
GetVersionExW
lstrlenW

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wst_czec.fon
wst_engl.fon
wst_fren.fon
wst_germ.fon
wst_ital.fon
wst_span.fon
wst_swed.fon
wstcodec.inf
wstcodec.sys
.sys windows:5 windows x86 arch:x86

5e94d6115bae4fe6e2b87706af1a8293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wstcodec.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeQueryPerformanceCounter

ntoskrnl.exe

IoCreateSymbolicLink
ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
RtlInitUnicodeString

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstdecod.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b773ed61e5f2f5b7c57feede58a7f58c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
FreeLibrary
lstrcmpW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
GetModuleHandleA
MulDiv
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

free
malloc
??2@YAPAXI@Z
sprintf
sscanf
??3@YAXPAX@Z

gdi32

CreateCompatibleDC
DeleteDC
CreateFontIndirectA
SetBkMode
DeleteObject
CreateDIBSection
SelectObject
SetTextColor
ExtTextOutA
SetBkColor
GetTextMetricsA
GetSystemPaletteEntries
GetDeviceCaps
GetTextColor

user32

GetWindowRect
GetDesktopWindow
DefWindowProcW
InvalidateRect
LoadStringW
SetRect
SetTimer
KillTimer
IsRectEmpty
ReleaseDC
GetDC
UnregisterClassA
SendMessageTimeoutA
DefWindowProcA
ShowWindow
CreateWindowExA
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW
GetWindowTextA
MessageBeep
IsDlgButtonChecked
GetDlgItem
SendMessageA
SetWindowTextA
CheckDlgButton
RegisterClassA
DestroyWindow

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegDeleteKeyW

ole32

CoTaskMemFree
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/BDAXP.cab
.cab
BdaSup.sys
.dll windows:5 windows x86 arch:x86

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BdaSup.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock

ntoskrnl.exe

ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
memmove

ks.sys

KsGetParent
KsAddItemToObjectBag
KsRemoveItemFromObjectBag
KsFreeObjectCreateItemsByContext
_KsEdit
KsCreateFilterFactory
KsMergeAutomationTables
KsFilterFactoryUpdateCacheData
KsGetFilterFromIrp
KsPinGetParentFilter
KsFilterAddTopologyConnections
KsGetPinFromIrp
KsFilterCreatePinFactory

Exports

Exports

BdaCheckChanges
BdaCommitChanges
BdaCreateFilterFactory
BdaCreateFilterFactoryEx
BdaCreatePin
BdaCreateTopology
BdaDeletePin
BdaFilterFactoryUpdateCacheData
BdaGetChangeState
BdaInitFilter
BdaMethodCreatePin
BdaMethodCreateTopology
BdaMethodDeletePin
BdaPropertyGetControllingPinId
BdaPropertyGetPinControl
BdaPropertyNodeDescriptors
BdaPropertyNodeEvents
BdaPropertyNodeMethods
BdaPropertyNodeProperties
BdaPropertyNodeTypes
BdaPropertyPinTypes
BdaPropertyTemplateConnections
BdaStartChanges
BdaUninitFilter
BdaValidateNodeProperty

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 896B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 768B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSDvbNP.ax
.dll regsvr32 windows:5 windows x86 arch:x86

8d46331ee3af79cade97e0eb594f6089

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
CloseHandle
CreateThread
CreateEventW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
IsBadWritePtr
GetCurrentProcess
lstrcmpW
IsBadReadPtr
GetLastError
ResetEvent
WaitForSingleObject
SleepEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TerminateProcess
InitializeCriticalSection
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

wcscmp
??2@YAPAXI@Z
swscanf
memmove
??3@YAXPAX@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegCreateKeyW

user32

DispatchMessageW
MsgWaitForMultipleObjectsEx
wsprintfW
PeekMessageW
TranslateMessage

ole32

StringFromCLSID
CoInitialize
CoTaskMemAlloc
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoGetMalloc
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVidCtl.dll
.dll regsvr32 windows:5 windows x86 arch:x86

0467516a475941daa18bfa5b1573ef90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
WideCharToMultiByte
GetTickCount
GetDriveTypeW
GetSystemDirectoryW
Sleep
IsValidLocale
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentProcessId
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
GetComputerNameA
LocalFree
LocalAlloc
CreateMutexA
VirtualQuery
GetSystemInfo
VirtualProtect
ReadFile
SetStdHandle
LCMapStringW
SetThreadExecutionState
FormatMessageW
IsBadReadPtr
GetOEMCP
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
SetFilePointer
HeapSize
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
HeapReAlloc
RaiseException
GetVersionExA
GetCommandLineA
TlsSetValue
DelayLoadFailureHook
CreateThread
WaitForMultipleObjects
ResetEvent
SetEvent
CreateMutexW
FindResourceW
LoadResource
LockResource
GetLastError
lstrlenA
MultiByteToWideChar
CloseHandle
ReleaseMutex
WaitForSingleObject
LCMapStringA
CreateEventW
GetModuleHandleW
GetShortPathNameW
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
LoadLibraryW
GetProcAddress
DeviceIoControl
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameW
lstrcatW
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
IsBadCodePtr
InterlockedExchange

ntdll

RtlUnwind

ole32

OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoGetMalloc
CoUninitialize
ProgIDFromCLSID
StringFromCLSID
StringFromGUID2
GetRunningObjectTable
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
HDC_UserSize
HDC_UserMarshal
HDC_UserUnmarshal
HDC_UserFree
HWND_UserSize
HWND_UserMarshal
HWND_UserUnmarshal
HWND_UserFree
CreateItemMoniker
CoCreateFreeThreadedMarshaler

oleaut32

SysFreeString
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserMarshal
VARIANT_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantCopy
SysAllocStringByteLen
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantChangeType
SysStringByteLen
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
VariantInit
OleCreatePictureIndirect
OleCreatePropertyFrame

user32

LoadStringW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjectsEx
MapWindowPoints
EqualRect
ReleaseDC
GetDC
IsWindow
CopyRect
SystemParametersInfoW
FillRect
SendMessageW
PostMessageW
GetWindowLongW
GetClientRect
SetTimer
KillTimer
GetKeyState
SetCursor
LoadImageW
RegisterClassExW
wsprintfW
LoadCursorW
PtInRect
IntersectRect
GetWindowRect
ReleaseCapture
SetCapture
GetDesktopWindow
DestroyWindow
SetFocus
IsChild
GetFocus
GetParent
ShowWindow
InvalidateRect
DefWindowProcW
SetWindowLongW
CreateWindowExW
BeginPaint
EndPaint
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
CallWindowProcW
CharNextW
GetClassInfoExW

advapi32

RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegQueryValueW
RegQueryValueExW
RegCreateKeyW
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
GetUserNameA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueW

gdi32

CreateDIBitmap
SelectObject
CreateCompatibleDC
GetDeviceCaps
CreateSolidBrush
DeleteObject
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
CreateRectRgnIndirect
DeleteDC

rpcrt4

NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubCall2
NdrStubForwardingFunction
NdrCStdStubBuffer_Release

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 903KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 693B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mpeg2Data.ax
.dll regsvr32 windows:5 windows x86 arch:x86

fcd4181f9417f53d1b10aa6fcfd706a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
WaitForMultipleObjects
LocalAlloc
LocalFree
CreateThread
LocalReAlloc
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
CreateEventW
GetThreadPriority
SetThreadPriority
lstrcpynW
lstrcpyW
lstrcmpW
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
LoadLibraryW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW
GetCurrentThread

msvcrt

malloc
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
free
_purecall

winmm

timeBeginPeriod
timeEndPeriod
timeSetEvent
timeKillEvent

advapi32

RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

user32

GetQueueStatus
PostThreadMessageW
wsprintfW
MsgWaitForMultipleObjects
PeekMessageW
RegisterWindowMessageW
DispatchMessageW

ole32

CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bda.inf
bdaplgin.ax
.dll regsvr32 windows:5 windows x86 arch:x86

2d0c35dab4bdadc34717c640b941494f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
InterlockedIncrement
FreeLibrary
InterlockedDecrement

msvcrt

??3@YAXPAX@Z
_vsnwprintf
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoInitialize

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ccdecode.inf
ccdecode.sys
.sys windows:5 windows x86 arch:x86

d5977c633dbdac9c68f7e446e09a0a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ccdecode.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount
KefAcquireSpinLockAtDpcLevel

hal

ExAcquireFastMutex
KeQueryPerformanceCounter
ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 554B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9bdaxp.cat
dxbda.inf
ipsink.ax
.dll regsvr32 windows:5 windows x86 arch:x86

628f6874f78df4a7257166f9144f8a03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ReleaseMutex
WaitForSingleObject
GetVersionExA
ResetEvent
WaitForMultipleObjects
CreateThread
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
SetEvent
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WaitForSingleObjectEx
CreateEventA
GetLastError
Sleep
IsBadReadPtr
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

free
_snprintf
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
rand

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen

ksproxy.ax

KsSynchronousDeviceControl

iphlpapi

GetUniDirectionalAdapterInfo
GetIpAddrTable

wsock32

closesocket
bind
setsockopt
htons
WSAStartup
ioctlsocket

ws2_32

WSASocketA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kstvtune.ax
.dll windows:5 windows x86 arch:x86

339742cd268348bf0f492e75bf25f820

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

kstvtune.pdb

Imports

kernel32

LoadResource
FindResourceW
GetLastError
SizeofResource
InterlockedCompareExchange
Sleep
CreateFileW
InterlockedExchange
GetProfileIntW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LockResource
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrcmpW
lstrlenW
lstrcpynW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
DisableThreadLibraryCalls
GetVersionExW
InitializeCriticalSection

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcstol
_purecall

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegSetValueExW

user32

GetWindowRect
GetDesktopWindow
InvalidateRect
wsprintfW
KillTimer
MessageBoxW
LoadStringW
CheckRadioButton
SetDlgItemTextW
SetDlgItemInt
DefWindowProcW
ShowWindow
DestroyWindow
SendMessageW
GetWindowLongW
MoveWindow
CreateDialogParamW
SetWindowLongW
GetDlgItemInt
GetAsyncKeyState
UpdateWindow
PostMessageW
SetTimer
EnableWindow
SetWindowTextW
GetDlgItem

comctl32

ord17

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoUninitialize

oleaut32

VariantInit
VariantClear

ksproxy.ax

KsSynchronousDeviceControl

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kswdmcap.ax
.dll regsvr32 windows:5 windows x86 arch:x86

a4d2e6643818292a0d8fef1ab511db26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObjectEx
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
SetLastError
CreateThread
InitializeCriticalSection
ExitThread
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
lstrlenW
GetCurrentProcess
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
Sleep
lstrcmpW
lstrcpyW
lstrcpynW
CreateEventW
GetLastError
DeviceIoControl
GetOverlappedResult
lstrlenA
MultiByteToWideChar
GetVersionExW
TerminateProcess
CloseHandle

mfc42

ord823
ord825

msvcrt

swprintf
_purecall
_ftol
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
sprintf
_wtoi
wcstod

advapi32

RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

user32

SetTimer
KillTimer
wsprintfW
LoadImageW
ShowWindow
SetDlgItemTextW
SetWindowTextA
GetWindowTextA
GetWindowLongW
SetWindowLongW
CreateDialogParamW
MoveWindow
InvalidateRect
DestroyWindow
LoadStringW
GetWindowRect
GetDesktopWindow
EnableWindow
SetDlgItemInt
MessageBoxW
IsWindowEnabled
GetDlgItemInt
SetRect
IsRectEmpty
SendMessageW
GetWindowTextW
GetDlgItem
SetWindowTextW

comctl32

InitCommonControlsEx

ole32

CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FilterHandleFromPin
PerformDataIntersection
PinFactoryIDFromPin
RedundantKsGetMultiplePinFactoryItems

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksxbar.ax
.dll windows:5 windows x86 arch:x86

86f7b1489e2283642a94ef3ffa08593e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventW
IsBadWritePtr
CreateFileW
lstrcpyW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
lstrcmpW
lstrlenW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExW

msvcrt

swprintf
??2@YAPAXI@Z
wcslen
_purecall
??3@YAXPAX@Z

user32

LoadStringW
GetWindowRect
GetDesktopWindow
MessageBoxW
SetRect
SetDlgItemTextW
SendMessageW
GetDlgItem
CheckRadioButton
EnableWindow
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW

ole32

CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleaut32

VariantInit
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpe.inf
mpe.sys
.sys windows:5 windows x86 arch:x86

b709125e5196d69f577afdd8423729ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mpe.pdb

Imports

ntoskrnl.exe

KeTickCount
KeQuerySystemTime
KeInitializeSpinLock
ExAllocatePoolWithTag
ExFreePool
KeBugCheckEx
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msdv.sys
.sys windows:5 windows x86 arch:x86

9c8ab33b01f025da51e11dfc59464123

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msdv.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
IoFreeIrp
IoAllocateIrp
IofCallDriver
ExFreePool
KeWaitForSingleObject
KeSetEvent
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
ExAllocatePoolWithTag
KeReleaseMutex
KeInitializeSpinLock
KeInitializeMutex
InterlockedExchange
KeInitializeTimer
KeInitializeDpc
InterlockedIncrement
KeClearEvent
IoFreeWorkItem
IoQueueWorkItem
IoAllocateWorkItem
KeCancelTimer
KeSetTimerEx
ObfDereferenceObject
MmMapLockedPagesSpecifyCache
PsTerminateSystemThread
InterlockedDecrement
KeSetPriorityThread
KeGetCurrentThread
IoCancelIrp
wcscpy
KeDelayExecutionThread

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
KeQueryPerformanceCounter

stream.sys

StreamClassStreamNotification
StreamClassRegisterAdapter
StreamClassGetNextEvent
StreamClassQueryMasterClockSync
StreamClassDeviceNotification

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msyuv.dll
.dll windows:5 windows x86 arch:x86

317bb2a83416a509406d650a33ce001a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalAlloc

msvcrt

_ftol
wcscpy

gdi32

GetSystemPaletteEntries

user32

GetDesktopWindow
MessageBoxW
ReleaseDC
GetDC

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nabtsfec.inf
nabtsfec.sys
.sys windows:5 windows x86 arch:x86

49970d1ef884a17567a446f9fea4d52c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nabtsfec.pdb

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
ExFreePool
ObfDereferenceObject
IofCallDriver
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
RtlInitUnicodeString
ExAllocatePoolWithTag
KeRestoreFloatingPointState
KeSaveFloatingPointState
KeTickCount
KeBugCheckEx
KeInitializeEvent

hal

KfReleaseSpinLock
KfAcquireSpinLock
ExReleaseFastMutex
KeQueryPerformanceCounter
ExAcquireFastMutex

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 256B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ndisip.inf
ndisip.sys
.sys windows:5 windows x86 arch:x86

85b9203fdd9c0bd977642878e7918927

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ndisip.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
KeInitializeSpinLock
IoFreeMdl
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
DbgPrint
ZwSetValueKey
ZwClose
RtlInitUnicodeString
IofCompleteRequest

hal

KfReleaseSpinLock
KfAcquireSpinLock

ndis.sys

NdisAllocateMemory
NdisFreeMemory
NdisAllocatePacket
NdisAllocateBufferPool
NdisMSetAttributesEx
NdisAllocateBuffer
NdisFreeBufferPool
NdisFreePacketPool
NdisInitializeWrapper
NdisMRegisterMiniport
NdisAllocateSpinLock
NdisAllocatePacketPool
NdisReleaseSpinLock
NdisMDeregisterDevice
NdisAcquireSpinLock
NdisFreePacket
NdisMRegisterDevice

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 331B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 890B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisdecd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

030f2fd88c6befc4cc612bcee23289da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
lstrcpynW
HeapDestroy
lstrcatW
GetModuleFileNameW
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
LoadLibraryW
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
GetShortPathNameW
LockResource
lstrcpyW
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
FlushFileBuffers
lstrlenW
MultiByteToWideChar
Sleep
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleW
EnterCriticalSection
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetCPInfo
GetOEMCP
WideCharToMultiByte
LocalFree
InterlockedExchange
TlsSetValue
GetCommandLineA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
ExitProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter
GetACP

ntdll

RtlUnwind

winmm

timeGetTime

advapi32

RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

user32

CharNextW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

oleaut32

SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysAllocString
SysFreeString
VarUI4FromStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
psisrndr.ax
.dll regsvr32 windows:5 windows x86 arch:x86

b3fabccc88441525f3d8a97e7abf70a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenA
MultiByteToWideChar
LoadLibraryW
FreeLibrary
lstrcmpW
lstrlenW
GetVersionExW
lstrcpynW

msvcrt

??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z

advapi32

RegSetValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

user32

wsprintfW

ole32

CoUninitialize
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
slip.inf
slip.sys
.sys windows:5 windows x86 arch:x86

3f9db7809b38aa51c5daad51c58fe7a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

slip.pdb

Imports

ntoskrnl.exe

KeTickCount
ExFreePool
ExAllocatePoolWithTag
DbgBreakPoint
KeQuerySystemTime
KeInitializeSpinLock

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassStreamNotification
StreamClassDeviceNotification
StreamClassRegisterAdapter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
streamip.inf
streamip.sys
.sys windows:5 windows x86 arch:x86

937c5c9480c457813996610d24c3ca2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

streamip.pdb

Imports

ntoskrnl.exe

IoGetDeviceObjectPointer
ZwCreateFile
IoGetDeviceInterfaces
ObfReferenceObject
IoBuildDeviceIoControlRequest
KeTickCount
ZwClose
ObfDereferenceObject
KeInitializeSpinLock
RtlInitUnicodeString
DbgPrint
ExFreePool
IofCallDriver
ExAllocatePoolWithTag

hal

KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassDeviceNotification
StreamClassGetNextEvent
StreamClassStreamNotification
StreamClassRegisterAdapter

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 647B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGECONS
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vbisurf.ax
.dll regsvr32 windows:5 windows x86 arch:x86

4ea881e9bc4888403a5e8628308bf315

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
InterlockedExchange
QueryPerformanceCounter
WaitForSingleObject
CloseHandle
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
lstrcmpW
CreateThread
ResetEvent
SetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
GetVersionExW
lstrlenW

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

advapi32

RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW

user32

wsprintfW

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstcodec.inf
wstcodec.sys
.sys windows:5 windows x86 arch:x86

5e94d6115bae4fe6e2b87706af1a8293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wstcodec.pdb

Imports

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeQueryPerformanceCounter

ntoskrnl.exe

IoCreateSymbolicLink
ExFreePool
KeInitializeSpinLock
KeTickCount
ExAllocatePoolWithTag
RtlInitUnicodeString

stream.sys

StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wstdecod.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b773ed61e5f2f5b7c57feede58a7f58c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
FreeLibrary
lstrcmpW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetVersionExW
GetModuleHandleA
MulDiv
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

msvcrt

free
malloc
??2@YAPAXI@Z
sprintf
sscanf
??3@YAXPAX@Z

gdi32

CreateCompatibleDC
DeleteDC
CreateFontIndirectA
SetBkMode
DeleteObject
CreateDIBSection
SelectObject
SetTextColor
ExtTextOutA
SetBkColor
GetTextMetricsA
GetSystemPaletteEntries
GetDeviceCaps
GetTextColor

user32

GetWindowRect
GetDesktopWindow
DefWindowProcW
InvalidateRect
LoadStringW
SetRect
SetTimer
KillTimer
IsRectEmpty
ReleaseDC
GetDC
UnregisterClassA
SendMessageTimeoutA
DefWindowProcA
ShowWindow
CreateWindowExA
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW
GetWindowTextA
MessageBeep
IsDlgButtonChecked
GetDlgItem
SendMessageA
SetWindowTextA
CheckDlgButton
RegisterClassA
DestroyWindow

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegDeleteKeyW

ole32

CoTaskMemFree
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DSETUP.dll
.dll windows:5 windows x86 arch:x86

a70ea8ee6da91cd789c0996ab2b7eadd

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

23/05/2002, 08:00

Not After

25/09/2011, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:87:58:00:03:00:00:00:5a
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/01/2005, 23:20

Not After

05/04/2006, 23:30

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a4:44:bb:3d:1d:e8:6f:41:98:8a:43:fb:03:bf:8c:ec:b5:56:56:7c
Signer

Actual PE Digest

a4:44:bb:3d:1d:e8:6f:41:98:8a:43:fb:03:bf:8c:ec:b5:56:56:7c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DSETUP.pdb

Imports

kernel32

LocalFree
LocalAlloc
lstrcmpA
WideCharToMultiByte
GetSystemDefaultLCID
GetModuleFileNameA
SetLastError
MultiByteToWideChar
lstrlenA
lstrlenW
CompareStringA
GetWindowsDirectoryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
GetLocalTime
ExitProcess
GetModuleHandleA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentDirectoryA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetFilePointer
RtlUnwind
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
SetEndOfFile
ReadFile
GetSystemDirectoryA
SetCurrentDirectoryA
GetVersionExA
LoadLibraryA
GetProcAddress
OutputDebugStringA
CreateMutexA
GetLastError
CloseHandle
FreeEnvironmentStringsA
FreeLibrary

user32

GetKeyboardType
DestroyWindow
SetFocus
CreateDialogParamA
SetDlgItemTextA
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA

winmm

mmioClose
mmioDescend
mmioRead
mmioOpenA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

StringFromGUID2

Exports

Exports

DirectXDeviceDriverSetupA
DirectXDeviceDriverSetupW
DirectXLoadString
DirectXRegisterApplicationA
DirectXRegisterApplicationW
DirectXSetupA
DirectXSetupCallback
DirectXSetupGetEULAA
DirectXSetupGetEULAW
DirectXSetupGetFileVersion
DirectXSetupGetVersion
DirectXSetupIsEng
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DirectXSetupSetCallback
DirectXSetupShowEULA
DirectXSetupW
DirectXUnRegisterApplication

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/DXSETUP.exe
.exe windows:5 windows x86 arch:x86

d259af4fe770bce3fad84cdd97d6aa76

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

23/05/2002, 08:00

Not After

25/09/2011, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:87:58:00:03:00:00:00:5a
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/01/2005, 23:20

Not After

05/04/2006, 23:30

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

55:33:6f:e8:43:c7:77:e9:b0:75:6a:de:f9:f5:4b:31:94:87:47:a1
Signer

Actual PE Digest

55:33:6f:e8:43:c7:77:e9:b0:75:6a:de:f9:f5:4b:31:94:87:47:a1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DXSETUP.pdb

Imports

advapi32

RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

kernel32

ReadFile
GetFileSize
CreateFileA
GetCurrentDirectoryA
lstrcmpiA
GetModuleFileNameA
SetErrorMode
CreateMutexA
GetModuleHandleA
CreateThread
lstrlenA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FindFirstFileA
FindClose
FreeLibrary
GetCurrentProcess
CloseHandle
GetLastError
GetVersionExA
LoadLibraryA
GetSystemDirectoryA
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
SetFilePointer
InterlockedExchange
RtlUnwind
HeapReAlloc
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
Sleep
CompareStringA
GetWindowsDirectoryA
OutputDebugStringA
GetProcAddress
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
EnterCriticalSection
LeaveCriticalSection

gdi32

CreateFontIndirectA
GetObjectA
StretchBlt
DeleteDC
CreateCompatibleDC
SelectObject
DeleteObject
GetDeviceCaps

user32

ReleaseDC
GetDC
LoadImageA
SystemParametersInfoA
SendDlgItemMessageA
SetWindowTextA
SetWindowLongA
PostMessageA
GetParent
SetDlgItemTextA
GetDlgItem
SendMessageA
ShowWindow
GetWindowLongA
GetAsyncKeyState
ExitWindowsEx
EnumWindows
CharLowerA
LoadStringA
MessageBoxA
GetWindowTextA
GetClassNameA
SetForegroundWindow
SetFocus

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

comctl32

CreatePropertySheetPageA
PropertySheetA
ord17

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DirectX/DirectX.cab
.cab
ACTC094.ini
ACT_RS.ini
ACT_RS.png
.png
GR3001.ini
GR3001.png
.png
GR3001_G.ini
GR4001.ini
GR4001.png
.png
GR4001_G.ini
GR4001_G.png
.png
GR4003.ini
GR4003.png
.png
GR4005.ini
GR4005.png
.png
GlmDA.ini
GlmDA.png
.png
GlmDA_G.ini
GlmDGP_G.ini
GlmDigGP.ini
GlmDigGP.png
.png
Hammer.ini
IA3002.ini
IA3002_1.png
.png
IA3002_2.png
.png
IA3002_G.ini
LGC202.ini
LGC202.png
.png
LGC207.ini
LGC207.png
.png
LGC209.ini
LGC209.png
.png
LGC20A.ini
LGC20A.png
.png
LGC291.ini
LGC291.png
.png
MS1B.ini
MS1B.png
.png
MS1B_01.png
.png
MS1B_02.png
.png
MS1B_03.png
.png
MS1B_04.png
.png
MS1B_05.png
.png
MS1B_06.png
.png
MS1B_07.png
.png
MS1B_08.png
.png
MS1B_09.png
.png
MS1B_10.png
.png
MS26.ini
MS26.png
.png
MS26_01.png
.png
MS26_02.png
.png
MS26_03.png
.png
MS26_04.png
.png
MS26_05.png
.png
MS26_06.png
.png
MS26_07.png
.png
MS26_08.png
.png
MS27.ini
MS27.png
.png
MS27_1.png
.png
MS27_2.png
.png
MS27_3.png
.png
MS27_4.png
.png
MS27_5.png
.png
MS28.ini
MS28.png
.png
MS28_1.png
.png
MS28_2.png
.png
MS28_3.png
.png
MS28_4.png
.png
MS28_5.png
.png
MS28_6.png
.png
MS28_7.png
.png
MS28_8.png
.png
MS34.ini
MS34.png
.png
MS34_01.png
.png
MS34_02.png
.png
MS34_03.png
.png
MS34_04.png
.png
MS34_05.png
.png
MS34_06.png
.png
MS34_07.png
.png
MS34_08.png
.png
MS34_G.ini
MS3B.ini
MS3B.png
.png
MS3B_1.png
.png
MS3B_2.png
.png
MS3B_3.png
.png
MS3B_4.png
.png
MS3B_a.png
.png
MS3B_c.png
.png
MS3B_m.png
.png
MS3B_t.png
.png
MS56.ini
MS56.png
.png
MS56_1.png
.png
MS56_10.png
.png
MS56_2.png
.png
MS56_3.png
.png
MS56_4.png
.png
MS56_5.png
.png
MS56_6.png
.png
MS56_7.png
.png
MS56_8.png
.png
MS56_9.png
.png
MS6.ini
MS6.png
.png
MS6_1.png
.png
MS6_10.png
.png
MS6_2.png
.png
MS6_3.png
.png
MS6_4.png
.png
MS6_5.png
.png
MS6_6.png
.png
MS6_7.png
.png
MS6_8.png
.png
MS6_9.png
.png
MS6_G.ini
MS7.ini
MS7.png
.png
MS7_1.png
.png
MS7_2.png
.png
MS7_3.png
.png
MS7_4.png
.png
MS7_5.png
.png
MS7_6.png
.png
MS7_7.png
.png
MS7_8.png
.png
MS7_9.png
.png
MS7_G.ini
MS8.ini
MS8.png
.png
MS8_1.png
.png
MS8_10.png
.png
MS8_2.png
.png
MS8_3.png
.png
MS8_4.png
.png
MS8_5.png
.png
MS8_6.png
.png
MS8_7.png
.png
MS8_8.png
.png
MS8_9.png
.png
MS8_G.ini
MSE.ini
MSE.png
.png
MSE_1.png
.png
MSE_10.png
.png
MSE_2.png
.png
MSE_3.png
.png
MSE_4.png
.png
MSE_5.png
.png
MSE_6.png
.png
MSE_7.png
.png
MSE_8.png
.png
MSE_9.png
.png
MSE_G.ini
MSF1F.ini
MSF1F.png
.png
MSF1F_1.png
.png
MSF1F_10.png
.png
MSF1F_2.png
.png
MSF1F_3.png
.png
MSF1F_4.png
.png
MSF1F_5.png
.png
MSF1F_6.png
.png
MSF1F_7.png
.png
MSF1F_8.png
.png
MSF1F_9.png
.png
MSPRW.ini
MSPRW.png
.png
MSPRW_1.png
.png
MSPRW_2.png
.png
MSPRW_3.png
.png
MSPRW_4.png
.png
MSPRW_5.png
.png
MSPRW_6.png
.png
MSPRW_7.png
.png
MSPRW_8.png
.png
RaiderPD.ini
SV-262E1.png
.png
SV-262E3.png
.png
SV-262E4.png
.png
SV2511.png
.png
SV2512.png
.png
amstream.dll
.dll regsvr32 windows:5 windows x86 arch:x86

daa0a1e803cad6b878538c4dbd14c8e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
QueryPerformanceCounter
DuplicateHandle
CreateThread
MulDiv
ReleaseSemaphore
CreateSemaphoreA
ResetEvent
SetEvent
lstrcmpW
CreateEventA
DisableThreadLibraryCalls
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
GetCurrentThread
GetModuleFileNameA
lstrlenW
lstrcatA
lstrcpyA
HeapDestroy
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueueUserAPC

user32

IsRectEmpty
CharNextA
wsprintfA

advapi32

RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarI4FromStr
LoadTypeLi
RegisterTypeLi
SetErrorInfo
LoadRegTypeLi
VariantChangeType
SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString

ddraw

DirectDrawCreate

msvcrt

??3@YAXPAX@Z
_purecall
free
??2@YAPAXI@Z
realloc
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d.inf
d3d8.dll
.dll windows:5 windows x86 arch:x86

ef7832f231192aada82d2edfae2a30ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3d8.pdb

Imports

user32

GetCursor
CreateIconIndirect
GetWindowDC
GetDesktopWindow
GetSystemMetrics
GetIconInfo
SetCursorPos
GetCursorPos
SetCursor
DestroyIcon
SystemParametersInfoA
GetClientRect
SetForegroundWindow
IsWindow
IntersectRect
wsprintfA
GetDC
ReleaseDC
LoadStringA

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegCloseKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

gdi32

GetNearestColor
GetDeviceCaps
CreateDCA
GetObjectA
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBitmap
GetSystemPaletteEntries

ddraw

LockCB
UnlockCB
DdEntry21
DdEntry19
DdEntry17
DdEntry7
DdEntry11
DdEntry12
DdEntry1
DdEntry18
DdEntry9
DdEntry10
DdEntry6
DdEntry2
DdEntry3
DdEntry20
DdEntry8
DdEntry13
DdEntry16

kernel32

EnterCriticalSection
LeaveCriticalSection
GetLastError
InterlockedIncrement
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryA
lstrcpynA
OutputDebugStringA
InterlockedDecrement
CloseHandle
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcessId
LocalAlloc
LocalFree
lstrcpyA
CreateFileA
SetFilePointer
ReadFile
MoveFileA
DebugBreak
WriteFile
GetFileSize
SetErrorMode
InitializeCriticalSection
OpenFile
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcmpiA
HeapAlloc
GetProcessHeap
ConnectNamedPipe
SetNamedPipeHandleState
DisconnectNamedPipe
SetEndOfFile
PeekNamedPipe
GetCommandLineA
GetVersionExA
RtlUnwind
HeapFree
RaiseException
HeapReAlloc
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
HeapSize
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InterlockedExchange
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
SetStdHandle
TerminateProcess
GetCurrentProcess
DeleteCriticalSection
GetCurrentThreadId
GetTickCount
_lclose
DeleteFileA
FlushFileBuffers

Exports

Exports

D3D8GetSWInfo
DebugSetMute
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3d9.dll
.dll windows:5 windows x86 arch:x86

8325c2626ec073a9be32cbd71afd0348

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3d9.pdb

Imports

user32

IsWindow
GetCursorPos
SetCursorPos
GetCursor
SetCursor
DestroyIcon
SystemParametersInfoA
GetSystemMetrics
GetDesktopWindow
GetWindowDC
CreateIconIndirect
GetClientRect
SetForegroundWindow
IntersectRect
wsprintfA
ReleaseDC
LoadStringA
GetDC

advapi32

RegSetValueExA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

gdi32

GetNearestColor
GetSystemPaletteEntries
CreateCompatibleDC
CreateDIBSection
DeleteObject
SelectObject
DeleteDC
CreateDCA
CreateDIBitmap
GetDeviceCaps

ddraw

DdEntry18
DdEntry9
DdEntry21
UnlockCB
LockCB
DdEntry17
DdEntry12
DdEntry10
DdEntry5
DdEntry4
DdEntry7
DdEntry11
DdEntry19
DdEntry20
DdEntry13
DdEntry16
DdEntry24
DdEntry8
DdEntry3
DdEntry22
DdEntry6
DdEntry23

kernel32

GetProcAddress
LoadLibraryA
InterlockedDecrement
GetSystemDirectoryA
GetModuleHandleA
lstrcpynA
OutputDebugStringA
CloseHandle
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcessId
LocalAlloc
LocalFree
SetErrorMode
_lclose
ReadFile
OpenFile
WideCharToMultiByte
GetVersionExA
CreateFileA
MultiByteToWideChar
SetFilePointer
MoveFileA
DeleteFileA
WriteFile
GetFileSize
lstrcmpiA
GetCommandLineA
FreeLibrary
RtlUnwind
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
LeaveCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcessHeap
HeapAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
UnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
TerminateProcess
GetCurrentProcess
TlsAlloc
CreateEventA
CreateThread
Sleep
WaitForSingleObject
ExitThread
SetEvent
WaitForMultipleObjects
GetTickCount
DebugBreak
EnterCriticalSection
InitializeCriticalSection
GetEnvironmentVariableA
TlsSetValue
TlsGetValue
GetTempPathA
GetProcessAffinityMask
SetThreadAffinityMask
DeleteCriticalSection
GetCurrentThreadId
InterlockedIncrement
GetLastError
GetEnvironmentStrings
ResumeThread
SetThreadPriority
GetCurrentThread
SetEndOfFile
RaiseException
SetUnhandledExceptionFilter

winmm

timeBeginPeriod
timeEndPeriod

Exports

Exports

D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
DebugSetLevel
DebugSetMute
Direct3DCreate9
Direct3DShaderValidatorCreate9
PSGPError
PSGPSampleTexture

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dim.dll
.dll windows:5 windows x86 arch:x86

a8d3a8f00f292ed95b4bdd305d1511e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

user32

SetRect
IntersectRect

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA

ddraw

DDInternalUnlock
D3DParseUnknownCommand
DDInternalLock
GetAliasedVidMem

kernel32

GetCurrentProcess
VirtualFree
GetCPInfo
HeapCreate
OutputDebugStringA
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadCodePtr
IsBadReadPtr
ord98
ord97
GetCurrentProcessId
GetVersionExA
GetSystemInfo
ord93
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
DebugBreak
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapSize
HeapReAlloc
FlushFileBuffers
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
GetLastError
SetFilePointer
CloseHandle
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CreateFileA
ReadFile
SetEndOfFile

Exports

Exports

D3DFree
D3DMalloc
D3DRealloc
Direct3DCreate
Direct3DCreateDevice
Direct3DCreateTexture
Direct3DGetSWRastZPixFmts
Direct3D_HALCleanUp
FlushD3DDevices
FlushD3DDevices2
PaletteAssociateNotify
PaletteUpdateNotify
SurfaceFlipNotify

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dim700.dll
.dll windows:5 windows x86 arch:x86

e3f2a1829330babefd2af5f7f12637dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IntersectRect
IsRectEmpty

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA

ddraw

DDInternalLock
DDInternalUnlock
GetAliasedVidMem
D3DParseUnknownCommand

kernel32

LocalReAlloc
GetEnvironmentStrings
LocalFree
EnterCriticalSection
LeaveCriticalSection
IsBadCodePtr
FreeLibrary
IsBadReadPtr
ord98
ord97
GetCurrentProcessId
GetVersionExA
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
ord93
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
GetCommandLineA
RtlUnwind
RaiseException
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
HeapSize
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
HeapAlloc
SetFilePointer
FlushFileBuffers
CloseHandle
Sleep
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
CreateFileA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
LocalAlloc

Exports

Exports

CreateTexture
D3DBreakVBLock
D3DFree
D3DMalloc
D3DRealloc
D3DTextureUpdate
DestroyTexture
Direct3DCreate
Direct3DCreateDevice
Direct3D_HALCleanUp
FlushD3DDevices
GetLOD
GetPriority
PaletteAssociateNotify
PaletteUpdateNotify
SetLOD
SetPriority
SurfaceFlipNotify

Sections

.text
Size: 768KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dpmesh.dll
.dll windows:5 windows x86 arch:x86

b3086d42fa0bf235e36f93dd418c52d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
SetEvent
EnterCriticalSection
lstrlenA
lstrcmpA
lstrcpyA
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
LeaveCriticalSection
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
VirtualFree
WriteFile
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
GetLocaleInfoW

Exports

Exports

CreateD3DRMPMeshVisual

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dramp.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

RampOldTri
g_RampOld_BeadTbl

Sections

CSEG
Size: 419KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 453B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DSEG
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3drm.dll
.dll windows:5 windows x86 arch:x86

7d187e631558c60627782494fbf69e5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

DeleteCriticalSection
GetSystemInfo
IsBadReadPtr
IsBadWritePtr
CloseHandle
GetProcAddress
LoadLibraryA
LocalFree
lstrcpyA
lstrlenA
lstrcpynA
lstrcatA
CreateFileA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetLastError
GlobalFree
GlobalLock
SetFilePointer
ReadFile
GetCurrentProcessId
DeleteFileA
SizeofResource
FreeResource
LockResource
LoadResource
GetTempFileNameA
GetTempPathA
FindResourceA
lstrcmpA
Sleep
GetProfileIntA
GlobalReAlloc
GlobalUnlock
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetCommandLineA
GetVersion
GetLocalTime
InterlockedExchange
CreateEventA
ResumeThread
CreateThread
TlsSetValue
ExitThread
ExitProcess
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
VirtualFree
WriteFile
GetModuleHandleA
VirtualAlloc
GetStringTypeA
GetStringTypeW
RaiseException
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
EnterCriticalSection
SetEvent
WaitForSingleObject
LeaveCriticalSection
GetTimeZoneInformation
GetSystemTime
GetCurrentThreadId

user32

GetDC
SetRect
ClientToScreen
ReleaseDC
wsprintfA
GetSystemMetrics

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

gdi32

GetSystemPaletteEntries
GetDeviceCaps

ddraw

DirectDrawCreate

msvfw32

ICImageDecompress

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

Exports

Exports

D3DRMColorGetAlpha
D3DRMColorGetBlue
D3DRMColorGetGreen
D3DRMColorGetRed
D3DRMCreateColorRGB
D3DRMCreateColorRGBA
D3DRMMatrixFromQuaternion
D3DRMQuaternionFromRotation
D3DRMQuaternionMultiply
D3DRMQuaternionSlerp
D3DRMVectorAdd
D3DRMVectorCrossProduct
D3DRMVectorDotProduct
D3DRMVectorModulus
D3DRMVectorNormalize
D3DRMVectorRandom
D3DRMVectorReflect
D3DRMVectorRotate
D3DRMVectorScale
D3DRMVectorSubtract
Direct3DRMCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3drm.inf
d3dxof.dll
.dll windows:5 windows x86 arch:x86

16b7e072dd7adabb232ed23a07e8cada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
WaitForSingleObject
SetEvent
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
CreateEventA
CloseHandle
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
lstrcmpA
IsBadReadPtr
lstrlenA
IsBadWritePtr
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
WaitForMultipleObjects
CreateThread
GetProcAddress
LoadLibraryA
DeleteFileA
WriteFile
GetTempFileNameA
ReadFile
SetFilePointer
MoveFileA
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
VirtualFree
GetModuleHandleA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
SetStdHandle
GetLocaleInfoA
FlushFileBuffers
GetLocaleInfoW

Exports

Exports

DirectXFileCreate
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ddhelp.exe
.exe windows:5 windows x86 arch:x86

b1c26122ccb7b48ddd747c1bca82f205

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
CloseHandle
WaitForSingleObject
OpenProcess
SetThreadPriority
GetCurrentThread
ResetEvent
SetEvent
CreateThread
GetPriorityClass
UnmapViewOfFile
GetCurrentProcessId
MapViewOfFile
InitializeCriticalSection
CreateMutexA
ExitThread
CreateEventA
SetPriorityClass
SetCurrentDirectoryA
GetSystemDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentProcess
TerminateProcess
FreeLibrary
CreateFileA
LoadLibraryA
GetProcAddress
lstrcmpiA
SetErrorMode
lstrlenA
CreateFileMappingA
lstrcpyA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
VirtualQuery
GetStringTypeW
GetStringTypeA
RtlUnwind
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualAlloc
Sleep
GetCPInfo
GetOEMCP
GetACP
VirtualFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
RegisterServiceProcess
GetCommandLineA
GetVersionExA
GetStartupInfoA
ExitProcess

gdi32

CreateFontA
SetTextColor
SetBkColor
ExtTextOutA
SelectObject
GetTextExtentPoint32A
GetStockObject
CreateDCA
DeleteDC
DeleteObject

user32

ReleaseDC
DefWindowProcA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassA
RegisterWindowMessageA
GetSystemMetrics
ShowWindow
UpdateWindow
GetDC
GetClientRect
ScrollWindowEx
GetMessageA
BeginPaint
EndPaint
FillRect
KillTimer
PostQuitMessage
SetTimer
wsprintfA

winmm

timeSetEvent
waveOutClose
waveOutSetVolume
waveOutGetVolume
waveOutOpen
timeKillEvent

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ddraw.dll
.dll windows:5 windows x86 arch:x86

c197a263f5c835c2c59c904c934a2004

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ddraw.pdb

Imports

ntdll

RtlUnwind

user32

GetForegroundWindow
GetDC
EqualRect
IntersectRect
ChangeDisplaySettingsA
RedrawWindow
UnionRect
GetClassInfoA
wsprintfA
GetDCEx
ClientToScreen
GetClientRect
GetWindowThreadProcessId
SetCursor
KillTimer
SetWindowLongA
SendMessageA
IsIconic
PostMessageA
CallWindowProcA
GetKeyState
SetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetLastActivePopup
GetAsyncKeyState
keybd_event
SystemParametersInfoA
SetForegroundWindow
SetWindowPos
OffsetRect
ShowWindow
IsZoomed
SetTimer
ClipCursor
GetDesktopWindow
GetWindow
GetWindowLongA
IsWindowVisible
IsWindowEnabled
GetParent
DefWindowProcA
RegisterClassA
CreateWindowExA
DestroyWindow
UnregisterClassA
GetKeyboardType
MessageBoxIndirectA
LoadStringA
GetSystemMetrics
EnumDisplaySettingsA
IsRectEmpty
CopyRect
SetRect
mouse_event
IsWindow
ReleaseDC

advapi32

RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetStdHandle
WriteFile
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RaiseException
ExitProcess
LCMapStringW
LCMapStringA
VirtualProtect
VirtualQuery
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
TerminateProcess
GetCurrentThreadId
GetModuleFileNameA
SetFilePointer
lstrcmpiA
GetPriorityClass
LocalAlloc
LocalFree
GetCurrentProcessId
GetLastError
GetSystemInfo
FreeLibrary
GetProcAddress
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
MakeCriticalSectionGlobal
ReinitializeCriticalSection
InterlockedExchange
ord93
DisableThreadLibraryCalls
ord98
ord97
GetModuleHandleA
lstrcpyA
IsBadCodePtr
GlobalMemoryStatus
SetErrorMode
lstrcpynA
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
IsBadWritePtr
GetSystemDefaultLCID
MapSLFix
OpenVxDHandle
UnMapLS
MapLS
IsBadReadPtr
GetProfileIntA
GetTickCount
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetPrivateProfileIntA
DeviceIoControl
OutputDebugStringA
ThunkConnect32
FT_Thunk
FT_Exit4
FT_Exit20
SMapLS
SUnMapLS
SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_20
MapSL
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
HeapCreate
GetVersionExA
CreateFileA
ReleaseMutex
SetEvent
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
CreateEventA
CreateProcessA
OpenEventA
GetCurrentProcess
lstrcatA
_lclose
ReadFile
OpenFile
WideCharToMultiByte
MultiByteToWideChar
GetSystemDirectoryA
lstrlenA
SetPriorityClass

gdi32

CreateDCA
SetStretchBltMode
StretchBlt
SetBkColor
ExtTextOutA
PatBlt
StretchDIBits
SetObjectOwner
GetObjectType
SaveDC
SetPaletteEntries
SelectPalette
RealizePalette
GetNearestColor
DeleteDC
CreateCompatibleBitmap
GetDIBits
CreateDIBSection
CreateCompatibleDC
SelectObject
GetSystemPaletteEntries
SetDIBColorTable
BitBlt
RestoreDC
GetDeviceCaps
CreatePalette
ResizePalette
DeleteObject
ExtEscape
GetStockObject
GetRegionData
GetDeviceGammaRamp
SetDeviceGammaRamp
SetSystemPaletteUse

Exports

Exports

AcquireDDThreadLock
D3DParseUnknownCommand
DDGetAttachedSurfaceLcl
DDHAL32_VidMemAlloc
DDHAL32_VidMemFree
DDInternalLock
DDInternalUnlock
DSoundHelp
DdEntry1
DdEntry10
DdEntry11
DdEntry12
DdEntry13
DdEntry16
DdEntry17
DdEntry18
DdEntry19
DdEntry2
DdEntry20
DdEntry21
DdEntry22
DdEntry23
DdEntry24
DdEntry3
DdEntry4
DdEntry5
DdEntry6
DdEntry7
DdEntry8
DdEntry9
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
GetAliasedVidMem
GetDDSurfaceLocal
GetNextMipMap
GetOLEThunkData
GetSurfaceFromDC
HeapVidMemAllocAligned
InternalLock
InternalUnlock
LateAllocateSurfaceMem
LockCB
RegisterSpecialCase
ReleaseDDThreadLock
UnlockCB
VidMemAlloc
VidMemAmountFree
VidMemFini
VidMemFree
VidMemInit
VidMemLargestFree
thk1632_ThunkData32
thk3216_ThunkData32

Sections

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ddraw.inf
ddraw.vxd
ddraw16.dll
ddrawex.dll
.dll regsvr32 windows:5 windows x86 arch:x86

84cac4e75ecba882b130d19c35d1f7bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ReleaseDC
GetDC
MessageBoxA
wsprintfA

kernel32

lstrlenA
LoadLibraryA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
LocalFree
GetProfileStringA
FreeLibrary
GetVersionExA
GetProcAddress
LocalAlloc
SetErrorMode
DisableThreadLibraryCalls

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey

gdi32

DeleteObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
GetSystemPaletteEntries
SetDIBColorTable
SelectObject

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ddraw

ReleaseDDThreadLock
AcquireDDThreadLock

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
devenum.dll
.dll regsvr32 windows:5 windows x86 arch:x86

6b6b7f1fca7e48432d882e6d001c1d9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatW
CreateMutexA
lstrcmpA
TerminateProcess
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
GetVersionExA
ReleaseMutex
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetLastError
lstrcmpiA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW

msvcrt

_purecall
free
??2@YAPAXI@Z
realloc
??3@YAXPAX@Z
_except_handler3
malloc

user32

LoadStringA
CharNextA
wsprintfA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegEnumKeyA

ole32

CoCreateInstance
CreateBindCtx
StringFromGUID2
CLSIDFromString
CreateAntiMoniker
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VarI4FromStr
LoadTypeLi
RegisterTypeLi
SysAllocString
VariantClear
SysFreeString

winmm

midiOutGetDevCapsA
waveInGetDevCapsA
waveOutGetDevCapsA
waveInMessage
waveOutMessage
waveInGetNumDevs
midiOutGetNumDevs

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
diactfrm.dll
.dll regsvr32 windows:5 windows x86 arch:x86

4858d3a4a4c5fc3b1e759ad75d7ca259

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
RaiseException
HeapSize
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetFilePointer
SetUnhandledExceptionFilter
VirtualProtect
GetSystemInfo
VirtualAlloc
SetStdHandle
IsBadCodePtr
FlushFileBuffers
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
UnmapViewOfFile
CreateFileW
CreateFileA
CreateFileMappingA
MapViewOfFile
GetFileSize
GetEnvironmentStrings
lstrlenA
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
MultiByteToWideChar
GetLastError
RtlUnwind
HeapFree
HeapAlloc
GetVersionExA
GetCommandLineA
TlsSetValue
GetCurrentThreadId
GetModuleFileNameA
Sleep
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
lstrcmpA
GetTickCount
MulDiv
lstrcpyA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualQuery

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

ole32

CoTaskMemFree
StringFromCLSID

user32

WindowFromPoint
EndPaint
BeginPaint
IsWindowVisible
SetPropA
GetPropA
RegisterClassExA
EnumChildWindows
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
ReleaseCapture
SetCapture
GetWindow
UnregisterClassA
GetClientRect
InvalidateRect
CreateWindowExA
DestroyWindow
LoadImageA
GetDesktopWindow
GetWindowDC
SetCursor
ValidateRect
LoadCursorA
GetIconInfo
DrawIcon
PostQuitMessage
ClipCursor
GetSystemMetrics
GetWindowRect
FillRect
GetUpdateRect
GetDoubleClickTime
SetFocus
SetParent
LoadStringA
IsWindow
MoveWindow
OffsetRect
GetDC
ReleaseDC
GetCursorPos
ScreenToClient
ClientToScreen
KillTimer
SetTimer
PtInRect
DrawTextA
InflateRect
ShowWindow
SendMessageA
SetWindowPos
GetParent
wsprintfA
PostMessageA

gdi32

SetBkColor
GetBkMode
GetBkColor
GetTextColor
CreateFontIndirectA
GetDeviceCaps
SetViewportOrgEx
OffsetViewportOrgEx
RestoreDC
SaveDC
CreateDIBSection
Polyline
DPtoLP
GetStockObject
GetObjectA
GetCurrentObject
LPtoDP
CreateCompatibleBitmap
StretchBlt
SetBrushOrgEx
SetStretchBltMode
GetBrushOrgEx
GetStretchBltMode
Polygon
ExcludeClipRect
IntersectClipRect
DeleteDC
CreateCompatibleDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
MoveToEx
LineTo
SetTextColor
SetBkMode
BitBlt
DeleteObject

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
diactfrm.inf
dijoy.hlp
dijoybrz.hlp
dijoychs.hlp
dijoycht.hlp
dijoycze.hlp
dijoydut.hlp
dijoyfrn.hlp
dijoyger.hlp
dijoyitn.hlp
dijoyjpn.hlp
dijoykor.hlp
dijoypol.hlp
dijoyrus.hlp
dijoyspa.hlp
dijoyswe.hlp
dimap.dll
.dll windows:5 windows x86 arch:x86

4e9166a531644c5def658b728c82a383

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileIntA
CreateDirectoryA
GetPrivateProfileStringA
GetVersion
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
RaiseException
RtlUnwind
ExitProcess
GetProcAddress
TlsFree
SetLastError
TlsGetValue
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
WritePrivateProfileStringA
SetUnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
HeapSize
VirtualAlloc
IsBadWritePtr
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
SetFilePointer
ReadFile
SetStdHandle
FlushFileBuffers
CloseHandle
GetLastError
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

advapi32

GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

wsprintfA
CharUpperBuffA

ole32

StringFromGUID2

dinput8

DirectInput8Create

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dimaps.inf
dinput.dll
.dll regsvr32 windows:5 windows x86 arch:x86

046ef65faa60d37c1d924c46c847304f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetEvent
DeleteCriticalSection
ResetEvent
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
WideCharToMultiByte
FreeLibraryAndExitThread
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventA
LoadLibraryA
GetTickCount
lstrcmpiA
ReadFileEx
DuplicateHandle
GetCurrentProcess
MultiByteToWideChar
lstrlenW
GetVersion
Sleep
ReleaseMutex
WaitForSingleObject
MulDiv
DeviceIoControl
LocalAlloc
LocalReAlloc
SleepEx
ResumeThread
GetProcAddress
DisableThreadLibraryCalls
UnmapViewOfFile
lstrcmpA
lstrcpyW
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetLocalTime
MapViewOfFile
CreateFileMappingA
CreateMutexA
LoadResource
FindResourceA
CreateProcessA
InitializeCriticalSection
GetVersionExA
IsBadCodePtr
GetCommandLineA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
lstrlenA
CreateFileA
ReadFile
SetFilePointer
GetFileSize
lstrcpyA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetFullPathNameA
InterlockedExchange
LocalFree
InterlockedDecrement
WriteFileEx
InterlockedIncrement

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

user32

wsprintfA
CharUpperA
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongA
CallNextHookEx
SetWindowsHookExA
PostThreadMessageA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
GetInputState
SystemParametersInfoA
IntersectRect
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetClientRect
ReleaseCapture
SetCursorPos
mouse_event
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageA
GetCursorPos
GetSystemMetrics
MapVirtualKeyA
LoadStringA
keybd_event
GetKeyboardType
IsRectEmpty
SubtractRect
SendMessageA
RegisterWindowMessageA
FindWindowA
SetWindowLongA
DefWindowProcA
GetPropA
SetPropA
RemovePropA
CallWindowProcA
IsWindow

winmm

mmioDescend
mmioCreateChunk
mmioRead
mmioWrite
mmioClose
mmioOpenA
mmioAscend

Exports

Exports

DirectInputCreateA
DirectInputCreateEx
DirectInputCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dinput.inf
dinput.vxd
dinput8.dll
.dll regsvr32 windows:5 windows x86 arch:x86

a54f5f32094867d71f38152da5912e90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
SetEvent
DeleteCriticalSection
ResetEvent
WideCharToMultiByte
GetCurrentProcessId
IsBadReadPtr
IsBadWritePtr
lstrlenW
FreeLibraryAndExitThread
FreeLibrary
GetLastError
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateEventA
LoadLibraryA
GetTickCount
lstrcmpiA
ReadFileEx
DuplicateHandle
GetCurrentProcess
MultiByteToWideChar
GetVersion
Sleep
ReleaseMutex
WaitForSingleObject
MulDiv
DeviceIoControl
LocalAlloc
LocalReAlloc
SleepEx
ResumeThread
GetProcAddress
DisableThreadLibraryCalls
UnmapViewOfFile
IsBadCodePtr
CompareFileTime
lstrcpyA
lstrcmpA
lstrcpyW
EnterCriticalSection
SystemTimeToFileTime
GetLocalTime
lstrcmpW
MapViewOfFile
CreateFileMappingA
CreateMutexA
LoadResource
FindResourceA
CreateProcessA
InitializeCriticalSection
GetVersionExA
GetCommandLineA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
GetCurrentThreadId
lstrlenA
GetSystemTimeAsFileTime
CreateFileA
ReadFile
SetFilePointer
GetFileSize
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetFullPathNameA
InterlockedExchange
LocalFree
InterlockedDecrement
WriteFileEx
InterlockedIncrement

advapi32

RegCreateKeyExA
RegEnumKeyExA
GetUserNameA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

user32

PostMessageA
wsprintfA
CharUpperA
UnhookWindowsHookEx
GetWindowThreadProcessId
IsIconic
GetForegroundWindow
GetWindowLongA
CallNextHookEx
SetWindowsHookExA
PostThreadMessageA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
GetInputState
SystemParametersInfoA
IntersectRect
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetClientRect
ReleaseCapture
SetCursorPos
mouse_event
GetAsyncKeyState
SetCapture
ClipCursor
ShowCursor
GetMessageTime
SendNotifyMessageA
GetCursorPos
GetSystemMetrics
MapVirtualKeyA
LoadStringA
keybd_event
GetKeyboardType
IsRectEmpty
SubtractRect
SendMessageA
RegisterWindowMessageA
FindWindowA
SetWindowLongA
DefWindowProcA
GetPropA
SetPropA
RemovePropA
CallWindowProcA
IsWindow
ToAsciiEx
MapVirtualKeyExA
GetKeyboardLayout
GetActiveWindow
GetKeyNameTextA
GetKeyNameTextW

Exports

Exports

DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 520KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
directx.inf
dmband.dll
.dll regsvr32 windows:5 windows x86 arch:x86

2dd98eee91901e42aced29ca5eefb08b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
MultiByteToWideChar
lstrcpynA
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
Sleep
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
IsBadWritePtr
GetTickCount
IsBadReadPtr

msvcrt

_adjust_fdiv
_initterm
free
malloc
wcstombs
__CxxFrameHandler
wcsncpy
_purecall

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmcompos.dll
.dll regsvr32 windows:5 windows x86 arch:x86

968421b7ed4e42ca13de160c864b4ae6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
IsBadCodePtr
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
InitializeCriticalSection
Sleep
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
MultiByteToWideChar
IsBadReadPtr

msvcrt

wcslen
malloc
free
_initterm
_adjust_fdiv
wcstombs
wcscpy
time
srand
wcsncpy
_purecall
__CxxFrameHandler
rand

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CreateStreamOnHGlobal

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmime.dll
.dll regsvr32 windows:5 windows x86 arch:x86

78a383d71e6608d446c8c82b2ebbecc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmime.pdb

Imports

kernel32

WaitForSingleObject
SetEvent
GetCurrentThreadId
Sleep
SetThreadPriority
CreateEventA
CreateThread
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
InterlockedDecrement
InitializeCriticalSection
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
GetModuleFileNameA

msvcrt

__dllonexit
_onexit
_adjust_fdiv
_initterm
rand
_CIpow
malloc
wcscpy
__CxxFrameHandler
wcscmp
time
srand
_ftol
_purecall
wcslen
free
wcstombs

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

user32

GetForegroundWindow
IsWindow
GetDesktopWindow

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmloader.dll
.dll regsvr32 windows:5 windows x86 arch:x86

8332206d5778356b1110b44f2e3cfdef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadCodePtr
GetFileAttributesA
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSection
FindClose
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
lstrlenA
lstrcatA
IsBadWritePtr
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
IsBadReadPtr
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
Sleep
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
lstrcpyA
InterlockedDecrement

msvcrt

fclose
fread
fwrite
ftell
fseek
_strerror
_fsopen
_wfsopen
malloc
free
_initterm
_adjust_fdiv
wcsncat
wcsrchr
_wcsicmp
mbstowcs
wcslen
wcstombs
wcsncpy
_purecall
wcscpy
__CxxFrameHandler
wcscat

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueExW

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmscript.dll
.dll regsvr32 windows:5 windows x86 arch:x86

903e24e172a63cf62c8720d3d4074255

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
WaitForSingleObject
SetEvent
CreateEventA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetTickCount
InterlockedDecrement
GetCurrentThreadId
IsBadCodePtr
InterlockedIncrement
IsBadWritePtr
CloseHandle
IsBadReadPtr
Sleep

msvcrt

_CIpow
_ftol
wcsncpy
tolower
_stricmp
wcstombs
wcsstr
_ultow
wcstoul
_endthreadex
_beginthreadex
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
_except_handler3
malloc
wcslen
wcscpy
wcscat
_wcsicmp
wcscmp
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA

ole32

CLSIDFromProgID
CoTaskMemFree
StringFromCLSID
CoUninitialize
CoInitialize
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmstyle.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9b9b56669a52debf1b2dccbc03819e5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
DisableThreadLibraryCalls
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
IsBadCodePtr
InterlockedIncrement
IsBadReadPtr
MultiByteToWideChar
IsBadWritePtr

msvcrt

wcstombs
wcscat
malloc
free
_initterm
_adjust_fdiv
time
srand
rand
wcslen
wcsncpy
wcscpy
_purecall
__CxxFrameHandler
_wcsicmp

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CreateStreamOnHGlobal

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmsynth.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7bc002e7c5147c1079569ca2d742d33d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
IsBadCodePtr
SetEvent
WaitForSingleObject
SetThreadPriority
CreateThread
CreateEventA
CloseHandle
InterlockedIncrement
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InterlockedDecrement
IsBadWritePtr
IsBadReadPtr
MulDiv
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InitializeCriticalSection

msvcrt

_adjust_fdiv
_initterm
wcscpy
wcstombs
free
malloc
__CxxFrameHandler
_CIpow
_ftol

winmm

timeGetTime

advapi32

RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

ole32

StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmusic.dll
.dll regsvr32 windows:5 windows x86 arch:x86

cf533db11ac2eb024189fe65469a16dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmusic.pdb

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
GetVersionExA
DisableThreadLibraryCalls
IsBadCodePtr
InterlockedExchange
FreeLibrary
GetProcAddress
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameA
ResetEvent
SetEvent
PulseEvent
WaitForMultipleObjects
MultiByteToWideChar
CreateEventA
DeviceIoControl
CreateFileA
LocalFree
LocalAlloc
GetOverlappedResult
SetLastError
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
OpenProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileMappingA
GetLastError
MapViewOfFile
CreateMutexA
IsBadWritePtr
WaitForSingleObject
ReleaseMutex
CloseHandle
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
CreateThread

msvcrt

mbstowcs
_wcsicmp
wcstombs
wcslen
_purecall
__CxxFrameHandler
wcscmp
_stricmp
memmove
free
_strnicmp
_adjust_fdiv
malloc
_initterm
wcscpy

winmm

waveOutMessage
timeGetTime
timeBeginPeriod
timeEndPeriod
waveOutGetNumDevs
waveOutGetDevCapsA

user32

wsprintfA
LoadStringA
IsWindow
GetDesktopWindow
GetForegroundWindow
wsprintfW

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyW
RegCreateKeyA
RegEnumKeyA
RegCreateKeyExA
RegDeleteKeyA

rpcrt4

UuidCreate

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString

msacm32

acmStreamPrepareHeader
acmStreamUnprepareHeader
acmStreamClose
acmStreamOpen
acmStreamSize
acmFormatSuggest
acmStreamConvert

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmusic.inf
dmusic16.dll
dmusic32.dll
.dll windows:5 windows x86 arch:x86

1ccfadb4dbe74682899ff87a8270931e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
DisableThreadLibraryCalls
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
DeleteCriticalSection
WaitForSingleObject
SetEvent
InterlockedDecrement
GetLastError
DeviceIoControl
CreateThread
InitializeCriticalSection
CreateEventA
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
CloseHandle
WaitForMultipleObjects
Sleep
OpenVxDHandle
ThunkConnect32
SUnMapLS_IP_EBP_20
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_16
CreateFileA

msvcrt

_initterm
_adjust_fdiv
malloc
_except_handler3
free
__CxxFrameHandler
_purecall

winmm

midiOutGetNumDevs
midiInGetNumDevs
midiOutGetDevCapsA
midiInGetDevCapsA
timeGetTime

advapi32

RegCreateKeyA
RegCloseKey

Exports

Exports

CreateCDirectMusicEmulatePort
EnumLegacyDevices

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dplay.inf
dplaysvr.exe
.exe windows:5 windows x86 arch:x86

0e2d56d5ee03e5e670b2f35982dccb42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
DeleteCriticalSection
UnmapViewOfFile
GetCurrentProcessId
MapViewOfFile
SetEvent
InitializeCriticalSection
CreateMutexA
CreateFileMappingA
CreateEventA
GetLastError
GetCurrentProcess
SetCurrentDirectoryA
GetSystemDirectoryA
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
CreateThread
OpenProcess
WaitForSingleObject
ExitThread
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetVersionExA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCommandLineA
GetStartupInfoA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetACP
GetOEMCP
GetCPInfo
Sleep
VirtualAlloc
VirtualQuery

advapi32

RegEnumKeyExA
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl

gdi32

GetStockObject

user32

DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

winmm

timeGetTime

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dplayx.dll
.dll regsvr32 windows:5 windows x86 arch:x86

14a9f951dfbe7fa48f97ee3b87fbac6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dplayx.pdb

Imports

kernel32

ReleaseMutex
SetEvent
WaitForSingleObject
GetTickCount
CreateThread
ResetEvent
lstrlenA
Sleep
FreeLibrary
GetVersionExA
DuplicateHandle
GetCurrentProcess
LoadLibraryW
LoadLibraryA
GetProcAddress
CreateEventW
CreateMutexW
CreateFileMappingW
OpenFileMappingW
OpenFileMappingA
CreateProcessW
CreateProcessA
GetCurrentDirectoryW
CreateFileMappingA
CompareStringW
CompareStringA
GetProfileIntA
InterlockedIncrement
InterlockedExchange
DisableThreadLibraryCalls
LocalFree
DebugBreak
WaitForMultipleObjects
HeapAlloc
HeapFree
HeapReAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetSystemInfo
VirtualProtect
GetCPInfo
GetLocaleInfoA
GetLastError
MapViewOfFile
CreateEventA
CreateMutexA
GetCurrentProcessId
UnmapViewOfFile
IsBadCodePtr
IsBadReadPtr
GetModuleHandleA
GetModuleFileNameA
CreateFileA
CloseHandle
SetFilePointer
ReadFile
InterlockedDecrement
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
VirtualAlloc
VirtualFree
GetCommandLineW
GetCommandLineA
ExitThread
OpenProcess
ResumeThread
GlobalFree
GlobalAlloc
ReleaseSemaphore
CreateSemaphoreA
RtlUnwind
VirtualQuery
GetStringTypeW

rpcrt4

UuidCreate

user32

wsprintfW
wsprintfA

advapi32

RegDeleteKeyA
RegDeleteKeyW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegDeleteValueW
RegEnumValueA
RegEnumValueW
RegSetValueExA
RegSetValueExW
RegEnumKeyExA
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyW

winmm

timeSetEvent
timeKillEvent
timeGetDevCaps
timeGetTime

Exports

Exports

DirectPlayCreate
DirectPlayEnumerate
DirectPlayEnumerateA
DirectPlayEnumerateW
DirectPlayLobbyCreateA
DirectPlayLobbyCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gdwDPlaySPRefCount

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpmodemx.dll
.dll windows:5 windows x86 arch:x86

11047f92afa1f1e11ff8e095545a3dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
PurgeComm
EscapeCommFunction
WaitForSingleObject
SetCommMask
SetEvent
CloseHandle
GetOverlappedResult
GetLastError
ReadFile
ClearCommError
WriteFile
GetCommState
ExitThread
WaitForMultipleObjects
WaitCommEvent
CreateEventA
ResumeThread
SetThreadPriority
CreateThread
InitializeCriticalSection
SetupComm
SetCommState
CreateFileA
lstrlenA
Sleep
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetCommTimeouts
DeleteCriticalSection

user32

DispatchMessageA
KillTimer
PeekMessageA
SetDlgItemTextA
GetParent
wsprintfA
SetTimer
GetWindowRect
GetDesktopWindow
SetWindowPos
GetDlgItemTextA
EnableWindow
GetForegroundWindow
DialogBoxParamA
GetWindowLongA
EndDialog
SetWindowLongA
GetDlgItem
SetFocus
TranslateMessage
SendDlgItemMessageA
LoadStringA

tapi32

lineInitialize
lineShutdown
lineDeallocateCall
lineOpen
lineNegotiateAPIVersion
lineGetID
lineGetCallInfo
lineGetDevCaps
lineAnswer
lineDrop
lineMakeCall
lineClose
lineConfigDialog

dplayx

gdwDPlaySPRefCount

Exports

Exports

SPInit

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnaddr.dll
.dll windows:5 windows x86 arch:x86

641a2dc94ce0a0b96209bc3eec8d3983

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dpnet

ord1

Exports

Exports

DirectPlay8AddressCreate

Sections

.text
Size: 4KB - Virtual size: 383B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnet.dll
.dll regsvr32 windows:5 windows x86 arch:x86

e360be635b983f3aa711f451096754da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
IsBadReadPtr
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
IsBadWritePtr
Sleep
GetCurrentThreadId
ResetEvent
InterlockedDecrement
SetEvent
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapFree
GetProcessHeap
GetCurrentProcessId
HeapAlloc
CreatePipe
InitializeCriticalSection
IsBadStringPtrA
GetLastError
GetVersionExA
FreeLibrary
LoadLibraryA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
TlsFree
CreateSemaphoreA
TlsAlloc
TlsSetValue
WaitForSingleObject
TlsGetValue
WaitForMultipleObjects
ReleaseSemaphore
InterlockedExchange
WaitForSingleObjectEx
SetThreadPriority
GetCurrentThread
CreateThread
CancelIo
SetWaitableTimer
CreateWaitableTimerA
InterlockedExchangeAdd
InterlockedCompareExchange
GetModuleFileNameA
SetLastError
OpenEventA
CreateProcessA
GetSystemDirectoryA
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
GetCommandLineA
OpenProcess
GetExitCodeProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateFileA
SleepEx
GetOverlappedResult
WaitForMultipleObjectsEx
SetCommMask
PurgeComm
SetCommTimeouts
SetCommState
ReadFile
FlushFileBuffers
WriteFile
lstrcpynA
FormatMessageA
GetStdHandle
DuplicateHandle

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoCreateGuid
StringFromGUID2
CLSIDFromString

msvcrt

malloc
_adjust_fdiv
_initterm
free
wcscpy
wcslen
_stricmp
wcsncpy
wcsrchr
_wcsnicmp
sprintf
strstr
strncpy
swprintf
srand
_ftol
wcscat
_wcsicmp
wcscmp
wcstoul
wcsncmp
_splitpath
memmove
strtol
_except_handler3

wsock32

WSASetLastError
sendto
setsockopt
shutdown
recvfrom
inet_ntoa
gethostbyaddr
inet_addr
bind
getsockname
select
WSAGetLastError
__WSAFDIsSet
socket
getsockopt
closesocket
ioctlsocket
gethostbyname
htons
ntohs
WSAStartup
WSACleanup
gethostname

user32

CharNextA
wsprintfA
PostMessageA
DialogBoxParamA
GetWindowLongA
EndDialog
SetWindowLongA
GetWindowTextA
GetDlgItem
SendMessageA
SetWindowTextA
LoadStringA

advapi32

CryptReleaseContext
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
CryptGenRandom
CryptAcquireContextA

Exports

Exports

DirectPlay8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnhpast.dll
.dll regsvr32 windows:5 windows x86 arch:x86

e688c48d8f962e056917b777bb5f3f5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DuplicateHandle
GetCurrentProcess
CreateIoCompletionPort
InterlockedDecrement
PostQueuedCompletionStatus
SetEvent
FreeLibrary
Sleep
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
IsBadWritePtr
GetCurrentThreadId
IsBadReadPtr
InterlockedIncrement
HeapAlloc
DisableThreadLibraryCalls
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
HeapFree
GetProcessHeap
GetVersionExA
MultiByteToWideChar
lstrlenA
InitializeCriticalSection
GetLastError
WideCharToMultiByte

winmm

timeGetTime

advapi32

CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

msvcrt

malloc
_adjust_fdiv
_initterm
free
wcslen
srand
swprintf
_except_handler3

ole32

StringFromGUID2

Exports

Exports

DirectPlayNATHelpCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnhupnp.dll
.dll regsvr32 windows:5 windows x86 arch:x86

60ed152f260b1eac811f86cb69dc678d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
ReleaseSemaphore
OpenEventA
IsBadWritePtr
DuplicateHandle
GetCurrentProcess
CreateIoCompletionPort
GetModuleFileNameA
Sleep
InterlockedDecrement
PostQueuedCompletionStatus
SetEvent
CreateEventA
FreeLibrary
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
WaitForSingleObject
CloseHandle
CreateSemaphoreA
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
InterlockedIncrement
DisableThreadLibraryCalls
DeleteCriticalSection
WideCharToMultiByte
GetLastError
InitializeCriticalSection
lstrlenA
HeapAlloc

user32

wsprintfA

winmm

timeGetTime

advapi32

CryptReleaseContext
RegQueryValueExA
RegSetValueExA
RegEnumValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
CryptAcquireContextA
CryptGenRandom
RegDeleteKeyA

ole32

CoInitializeEx
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoSetProxyBlanket

msvcrt

_initterm
_adjust_fdiv
malloc
free
wcslen
_stricmp
_strnicmp
atoi
strncpy
swprintf
srand
_except_handler3
strstr
strtok
strchr
_splitpath

Exports

Exports

DirectPlayNATHelpCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnlobby.dll
.dll windows:5 windows x86 arch:x86

641a2dc94ce0a0b96209bc3eec8d3983

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dpnet

ord1

Exports

Exports

DirectPlay8LobbyCreate

Sections

.text
Size: 4KB - Virtual size: 382B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpnsvr.exe
.exe windows:5 windows x86 arch:x86

baae137c778bcc5dcc0dd2e891a5e245

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
CreateMutexA
CreateEventA
ReleaseMutex
WaitForSingleObject
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
InterlockedDecrement
QueryPerformanceCounter
GetCurrentThreadId
SetEvent
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetTickCount
LeaveCriticalSection
EnterCriticalSection
OpenProcess
GetLastError
CloseHandle
InterlockedIncrement
OpenEventA
lstrlenA
CompareStringA
HeapFree
GetProcessHeap
GetCurrentProcessId
HeapAlloc
CreateSemaphoreA
ReleaseSemaphore
GetStartupInfoA
InitializeCriticalSection
GetVersionExA
FreeLibrary
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar

ole32

CoCreateInstance
StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
srand
__setusermatherr
wcslen

advapi32

CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
CryptAcquireContextA

user32

wsprintfA

winmm

timeGetTime

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dpvacm.dll
.dll regsvr32 windows:5 windows x86 arch:x86

f981406e3d1ad54dccf4fecf9e46a444

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
lstrlenA
GetVersionExA
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
FreeLibrary
DeleteCriticalSection
GetLastError
IsBadWritePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
GetProcessHeap
HeapAlloc
Sleep

user32

LoadStringA

winmm

timeGetTime

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmDriverDetailsA
acmStreamClose
acmDriverID
acmStreamOpen

advapi32

RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA

ole32

CoCreateInstance
StringFromGUID2

msvcrt

srand
_purecall
free
swprintf
__dllonexit
_onexit
_except_handler3
malloc
wcslen
_adjust_fdiv
_initterm

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpvoice.dll
.dll regsvr32 windows:5 windows x86 arch:x86

5aee207477294953954c51dc722e6c2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
SetThreadPriority
ResetEvent
IsBadReadPtr
Sleep
IsBadWritePtr
GetSystemInfo
CreateSemaphoreA
CreateEventA
GetProfileIntA
SetLastError
GetSystemDirectoryA
ReleaseMutex
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
lstrcpyA
DeleteCriticalSection
GetTickCount
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
CloseHandle
SetEvent
WaitForSingleObject
CreateMutexA
TerminateThread
GetExitCodeThread
GetWindowsDirectoryA
GetExitCodeProcess
CreateProcessA
HeapFree
GetProcessHeap
CreateThread
InitializeCriticalSection
GetLastError
GetVersionExA
lstrlenA
FreeLibrary
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
HeapAlloc

msvcrt

swprintf
__dllonexit
_onexit
malloc
wcslen
_strnicmp
strncat
strncpy
_ftol
wcscat
_CIpow
_except_handler3
?terminate@@YAXXZ
_adjust_fdiv
_initterm
free
_beginthreadex
_endthreadex
sprintf
_purecall
wcscpy
__CxxFrameHandler
fclose
fflush
_vsnprintf
fputs
vfprintf
fopen
srand

user32

LoadStringA
MessageBoxA
LoadCursorA
GetSysColorBrush
RegisterClassA
InvalidateRgn
DefWindowProcA
IsWindow
GetClientRect
BeginPaint
EndPaint
UnregisterClassA
GetWindowLongA
EnableWindow
DialogBoxParamA
GetParent
GetDlgItem
EndDialog
LoadIconA
SendDlgItemMessageA
PostMessageA
SetWindowLongA
SystemParametersInfoA
GetDC
ReleaseDC
SendMessageA
EnumWindows
GetWindowRect
GetSystemMetrics
SetForegroundWindow
SetWindowPos
GetClassNameA
GetWindowThreadProcessId

winmm

mixerSetControlDetails
waveInGetDevCapsA
PlaySoundA
waveOutGetDevCapsA
waveOutSetVolume
waveOutGetVolume
mixerGetID
waveInGetDevCapsW
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
timeGetTime
waveOutGetDevCapsW

advapi32

RegFlushKey
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

ole32

CoUninitialize
CLSIDFromString
StringFromGUID2
CoInitializeEx
CoCreateInstance

comctl32

CreatePropertySheetPageA
PropertySheetA

gdi32

DeleteObject
LineTo
CreateFontIndirectA
GetDeviceCaps
CreatePen
CreateSolidBrush
GetStockObject
Rectangle
MoveToEx
SelectObject

Exports

Exports

DirectPlayVoiceCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpvoice.inf
dpvsetup.exe
.exe windows:5 windows x86 arch:x86

10089713ee9a30e6ce6391ce7f2f267f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
FreeLibrary
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
SetLastError
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
Sleep
CreateProcessA
CloseHandle
GetExitCodeProcess
GetWindowsDirectoryA
GetExitCodeThread
TerminateThread
WaitForSingleObject
SetEvent
CreateMutexA
lstrcpyA
WaitForMultipleObjects
CreateThread
CreateEventA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ReleaseMutex
GetSystemDirectoryA
OpenFileMappingA
OpenEventA

msvcrt

__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
__p__fmode
__p__commode
_XcptFilter
_exit
_c_exit
fopen
vfprintf
fputs
_vsnprintf
fflush
fclose
strncpy
strncat
sprintf
_strnicmp
wcslen
srand
_stricmp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_cexit
exit
strtok
_acmdln

user32

GetSystemMetrics
LoadStringA
LoadCursorA
GetSysColorBrush
RegisterClassA
InvalidateRgn
DefWindowProcA
GetClientRect
BeginPaint
EndPaint
UnregisterClassA
GetDesktopWindow
GetWindowLongA
EnableWindow
DialogBoxParamA
IsWindow
GetParent
GetDlgItem
EndDialog
LoadIconA
SendDlgItemMessageA
MessageBoxA
PostMessageA
SetWindowLongA
SystemParametersInfoA
GetDC
ReleaseDC
SendMessageA
EnumWindows
GetWindowRect
SetForegroundWindow
GetWindowThreadProcessId
GetClassNameA
SetWindowPos

winmm

waveInGetDevCapsW
waveInGetDevCapsA
PlaySoundA
waveOutGetDevCapsA
waveOutSetVolume
waveOutGetVolume
mixerGetID
waveOutGetDevCapsW
timeGetTime

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromGUID2

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegFlushKey

gdi32

CreateFontIndirectA
DeleteObject
GetDeviceCaps
CreatePen
SelectObject
MoveToEx
LineTo
Rectangle
GetStockObject
CreateSolidBrush

dsound

ord1

comctl32

PropertySheetA
CreatePropertySheetPageA
ord17

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dpvvox.dll
.dll regsvr32 windows:5 windows x86 arch:x86

9ca221c3a877565ad9bffec04d44c52e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
lstrlenA
GetVersionExA
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
FreeLibrary
DeleteCriticalSection
GetLastError
IsBadWritePtr
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapFree
GetProcessHeap
HeapAlloc
Sleep

user32

LoadStringA

winmm

timeGetTime

msacm32

acmStreamClose
acmStreamOpen
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

ole32

CoCreateInstance
StringFromGUID2

msvcrt

_purecall
floor
_ftol
free
calloc
ceil
_except_handler3
malloc
_CIpow
srand
_CIexp
_CIasin
_initterm
_adjust_fdiv
__dllonexit
_onexit
swprintf
wcslen
_CIacos

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dpwsockx.dll
.dll windows:5 windows x86 arch:x86

e8b63a3790a711c4fc7893e7e8963b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dpwsockx.pdb

Imports

kernel32

InterlockedExchange
Sleep
ResetEvent
SetEvent
SetThreadPriority
CreateThread
WaitForSingleObject
GetVersionExA
DisableThreadLibraryCalls
HeapAlloc
GetProcessHeap
ReleaseMutex
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
HeapFree
CreateProcessA
GetSystemDirectoryA
OpenEventA
GetCurrentProcessId
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
LoadLibraryA
SetUnhandledExceptionFilter
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetSystemInfo
FreeEnvironmentStringsA
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetModuleHandleA
ExitProcess
GetCommandLineA
FreeLibrary
GetProcAddress
ExitThread
WaitForMultipleObjectsEx
InterlockedDecrement
GetLastError
InterlockedIncrement
InitializeCriticalSection
CreateEventA
CloseHandle
DeleteCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
LeaveCriticalSection

user32

SetWindowLongA
GetForegroundWindow
SendMessageA
SetFocus
GetDlgItem
GetWindowLongA
GetDlgItemTextA
EndDialog
DialogBoxParamA

wsock32

select
__WSAFDIsSet
getpeername
recvfrom
gethostname
gethostbyname
send
sendto
listen
accept
getsockname
connect
setsockopt
inet_ntoa
WSAGetLastError
closesocket
inet_addr
getsockopt
WSACleanup
WSAStartup
ntohs
bind
socket
ioctlsocket
htons
recv

winmm

timeGetTime

advapi32

SetSecurityDescriptorDacl
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegOpenKeyExA

dplayx

gdwDPlaySPRefCount

Exports

Exports

DPWS_BuildIPMessageHeader
DPWS_GetEnumPort
SPInit

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsdmo.dll
.dll regsvr32 windows:5 windows x86 arch:x86

320f45a32628b35d761b69e505a2c544

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
CreateEventA
IsBadWritePtr
IsBadReadPtr
InterlockedDecrement
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameA
Sleep
QueryPerformanceCounter
lstrlenA

msvcrt

_initterm
_adjust_fdiv
malloc
free
wcslen
_vsnwprintf
_vsnprintf
_CIsinh
ceil
modf
__CxxFrameHandler
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
wcstombs
_CIpow
floor
_ftol

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

ole32

StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc

msdmo

DMORegister
DMOUnregister
MoInitMediaType
MoFreeMediaType
MoCopyMediaType

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsdmoprp.dll
.dll regsvr32 windows:5 windows x86 arch:x86

44c532b5aea3995196546902607fa520

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
GetShortPathNameA
lstrcpyA
MulDiv
GetCurrentThreadId
HeapAlloc
FlushInstructionCache
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
Sleep
GetProcessHeap
HeapFree
lstrlenW
WideCharToMultiByte
LockResource
MultiByteToWideChar

msvcrt

_initterm
malloc
free
??3@YAXPAX@Z
realloc
??2@YAPAXI@Z
atoi
atof
_ftol
_vsnprintf
_purecall
_adjust_fdiv

gdi32

GetDeviceCaps
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr

user32

CheckDlgButton
IsDlgButtonChecked
GetDlgItem
GetDC
SendMessageA
CharNextA
ShowWindow
MoveWindow
IsDialogMessageA
SetWindowLongA
DestroyWindow
IsWindow
LoadStringA
GetDialogBaseUnits
ReleaseDC
CreateDialogParamA
WinHelpA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

advapi32

RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsetup.inf
dsound.dll
.dll windows:5 windows x86 arch:x86

bc76e8fe5d7fb75c8ade297b2e2871ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dsound.pdb

Imports

kernel32

HeapCreate
HeapDestroy
HeapAlloc
HeapFree
DuplicateHandle
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
SetThreadPriority
SetPriorityClass
GetThreadPriority
GetPriorityClass
GetCurrentProcessId
GetCurrentThread
DeviceIoControl
ReleaseMutex
SetEvent
WaitForSingleObject
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
CreateEventA
lstrcpyA
CreateProcessA
OpenEventA
SetLastError
GetWindowsDirectoryA
FindResourceA
CreateMutexA
DisableThreadLibraryCalls
GetCurrentThreadId
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateThread
GetExitCodeThread
ReadFile
GetSystemDirectoryA
GetOverlappedResult
ResetEvent
GetTickCount
WaitForMultipleObjects
OpenFileMappingA
GetPrivateProfileStringA
MulDiv
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OpenVxDHandle
ConvertToGlobalHandle
RtlUnwind
HeapReAlloc
ExitProcess
HeapSize
RaiseException
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
SetFilePointer
GetFileSize
GetCommandLineA
GetFullPathNameA
CreateFileA
GetModuleHandleA
GetModuleFileNameA
OpenProcess
CloseHandle

user32

LoadStringA
EnumWindows
GetWindowThreadProcessId
IsWindow
GetForegroundWindow
GetParent
wsprintfA
CharUpperA
GetWindowPlacement
CharLowerBuffA

advapi32

RegCreateKeyA
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExA
RegSetValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExA

ole32

CoCreateInstance

winmm

waveOutGetDevCapsA
waveInGetDevCapsA
waveOutGetVolume
waveOutSetVolume
waveOutMessage
waveInMessage
waveOutGetNumDevs
waveInGetNumDevs
waveOutOpen
waveOutClose
waveInOpen
waveInClose
mmioOpenA
timeGetTime
waveInUnprepareHeader
waveInReset
waveInGetPosition
waveInAddBuffer
waveInPrepareHeader
waveInStart
waveOutUnprepareHeader
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutGetPosition
mixerClose
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerSetControlDetails
timeEndPeriod
timeBeginPeriod
waveInStop

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

rpcrt4

UuidFromStringA

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

.text
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 435B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dsound.inf
dsound.vxd
dsound3d.dll
.dll windows:5 windows x86 arch:x86

03deea28c2baec368335052cd61db3aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
WriteFile
Sleep
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery

Exports

Exports

CafBiquadCoeffs

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dswave.dll
.dll regsvr32 windows:5 windows x86 arch:x86

53dde5acafd181deae6d47482f150b5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalUnlock
IsBadWritePtr
IsBadReadPtr
GlobalLock
GlobalAlloc
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GlobalFree
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GlobalHandle
DeleteCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetVersionExA
Sleep
InterlockedIncrement
QueryPerformanceCounter
InterlockedDecrement

msvcrt

free
memmove
_initterm
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
wcstombs
_adjust_fdiv
_purecall

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest
acmStreamOpen

ole32

StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx7vb.dll
.dll regsvr32 windows:5 windows x86 arch:x86

1075cfd402ecf012fa24c5ee66bf0f31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LockResource
_lopen
_lread
_lclose
WriteFile
FindResourceW
OutputDebugStringA
GetModuleHandleA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
SizeofResource
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
GetCurrentProcess
GetLastError
lstrlenA
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
LocalReAlloc
lstrcmpiA
LeaveCriticalSection
EnterCriticalSection
CreateEventA
CreateThread
ResumeThread
GetSystemDefaultLCID
WaitForSingleObject
CloseHandle
SetEvent
GetTickCount
GetProcAddress
lstrlenW
GetVersionExA
DisableThreadLibraryCalls
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection

msvcrt

_except_handler3
wcslen
_wcsicmp
wcsncmp
_wcsupr
wcscpy

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA

ole32

CoCreateGuid
OleInitialize
CoGetInterfaceAndReleaseStream
OleUninitialize
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
StringFromCLSID

gdi32

SetBkMode
SetBkColor
Polyline
CreateBrushIndirect
CreateSolidBrush
CreateHatchBrush
CreatePen
GetObjectA
CreateCompatibleDC
SelectObject
StretchBlt
DeleteObject
GetSystemPaletteEntries
CreateHalftonePalette
GetPaletteEntries
CreateICA
GetDeviceCaps
Rectangle
RoundRect
Ellipse
ExtTextOutW
SetTextColor
GetTextAlign
SetTextAlign
DeleteDC

msacm32

acmStreamSize
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamOpen
acmStreamClose

user32

LoadStringA
CharNextA
GetWindowRect
GetDC
ReleaseDC
LoadImageA
wsprintfA

oleaut32

VariantChangeType
SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx8vb.dll
.dll regsvr32 windows:5 windows x86 arch:x86

d7478ded6c8775462f2d7c0c8f58d1d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointer
ReadFile
SetThreadPriority
GetTickCount
Sleep
lstrcmpA
WriteFile
FindResourceW
OutputDebugStringA
GetModuleHandleA
HeapValidate
LockResource
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
lstrlenA
SizeofResource
GetCurrentThread
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
GetCurrentProcess
GetLastError
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
CreateEventA
CreateThread
ResumeThread
GetSystemDefaultLCID
WaitForSingleObject
CloseHandle
SetEvent
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
lstrlenW
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
GetProcessHeap
HeapFree
CreateFileW
IsProcessorFeaturePresent
GetVersionExA
IsDBCSLeadByte
GetTempPathA
GetTempFileNameA
DeleteFileA
InitializeCriticalSection
TerminateProcess

msvcrt

malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
realloc
free
_CIacos
_finite
_ftol
wcslen
sprintf
wcscpy
ceil
?terminate@@YAXXZ
exit
floor
_CIpow
_setjmp3
longjmp
sscanf
isspace
isalnum
_except_handler3
_snprintf
__CxxFrameHandler
qsort
_controlfp
_wcsicmp
_strdup
setlocale
calloc
_vsnprintf
atoi
isdigit
isalpha

advapi32

RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey

ole32

CoGetInterfaceAndReleaseStream
OleInitialize
CoCreateGuid
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
CoReleaseMarshalData
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
StringFromCLSID
CoUninitialize
CoInitializeEx
CoInitialize
OleUninitialize

gdi32

GetDeviceCaps
CreateICA
GetObjectA
SelectObject
CreateFontIndirectA
GetCurrentObject
GetOutlineTextMetricsA
DeleteObject
GetGlyphOutlineA
GetGlyphOutlineW
SetTextColor
SetBkColor
SetBkMode
CreateDIBSection
CreateCompatibleDC
DeleteDC

msacm32

acmStreamPrepareHeader
acmStreamOpen
acmStreamSize
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose

user32

DispatchMessageA
TranslateMessage
LoadStringA
CharNextA
wsprintfA
DrawTextA
DrawTextW
PeekMessageA

oleaut32

SafeArrayCreate
RegisterTypeLi
LoadTypeLi
SafeArrayDestroy
SysFreeString
SysAllocString

d3dxof

DirectXFileCreate

Exports

Exports

D3DIndexBuffer8GetData
D3DIndexBuffer8SetData
D3DVertexBuffer8GetData
D3DVertexBuffer8SetData
D3DXMeshIndexBuffer8GetData
D3DXMeshIndexBuffer8SetData
D3DXMeshVertexBuffer8GetData
D3DXMeshVertexBuffer8SetData
DXCopyMemory
DXLockArray8
DXUnlockArray8
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VB_AddDataToBuffer
VB_AddStringToBuffer
VB_D3DColorARGB
VB_D3DColorMake
VB_D3DColorRGBA
VB_D3DColorXRGB
VB_D3DXColorAdd
VB_D3DXColorAdjustContrast
VB_D3DXColorAdjustSaturation
VB_D3DXColorLerp
VB_D3DXColorModulate
VB_D3DXColorNegative
VB_D3DXColorScale
VB_D3DXColorSubtract
VB_D3DXMatrixAffineTransformation
VB_D3DXMatrixIdentity
VB_D3DXMatrixInverse
VB_D3DXMatrixIsIdentity
VB_D3DXMatrixLookAtLH
VB_D3DXMatrixLookAtRH
VB_D3DXMatrixMultiply
VB_D3DXMatrixOrthoLH
VB_D3DXMatrixOrthoOffCenterLH
VB_D3DXMatrixOrthoOffCenterRH
VB_D3DXMatrixOrthoRH
VB_D3DXMatrixPerspectiveFovLH
VB_D3DXMatrixPerspectiveFovRH
VB_D3DXMatrixPerspectiveLH
VB_D3DXMatrixPerspectiveOffCenterLH
VB_D3DXMatrixPerspectiveOffCenterRH
VB_D3DXMatrixPerspectiveRH
VB_D3DXMatrixReflect
VB_D3DXMatrixRotationAxis
VB_D3DXMatrixRotationQuaternion
VB_D3DXMatrixRotationX
VB_D3DXMatrixRotationY
VB_D3DXMatrixRotationYawPitchRoll
VB_D3DXMatrixRotationZ
VB_D3DXMatrixScaling
VB_D3DXMatrixShadow
VB_D3DXMatrixTransformation
VB_D3DXMatrixTranslation
VB_D3DXMatrixTranspose
VB_D3DXMatrixfDeterminant
VB_D3DXPlaneDot
VB_D3DXPlaneDotCoord
VB_D3DXPlaneDotNormal
VB_D3DXPlaneFromPointNormal
VB_D3DXPlaneFromPoints
VB_D3DXPlaneIntersectLine
VB_D3DXPlaneNormalize
VB_D3DXPlaneTransform
VB_D3DXQuaternionBaryCentric
VB_D3DXQuaternionConjugate
VB_D3DXQuaternionDot
VB_D3DXQuaternionExp
VB_D3DXQuaternionIdentity
VB_D3DXQuaternionInverse
VB_D3DXQuaternionIsIdentity
VB_D3DXQuaternionLength
VB_D3DXQuaternionLengthSq
VB_D3DXQuaternionLn
VB_D3DXQuaternionMultiply
VB_D3DXQuaternionNormalize
VB_D3DXQuaternionRotationAxis
VB_D3DXQuaternionRotationMatrix
VB_D3DXQuaternionRotationYawPitchRoll
VB_D3DXQuaternionSlerp
VB_D3DXQuaternionSquad
VB_D3DXQuaternionToAxisAngle
VB_D3DXVec2Add
VB_D3DXVec2BaryCentric
VB_D3DXVec2CCW
VB_D3DXVec2CatmullRom
VB_D3DXVec2Dot
VB_D3DXVec2Hermite
VB_D3DXVec2Length
VB_D3DXVec2LengthSq
VB_D3DXVec2Lerp
VB_D3DXVec2Maximize
VB_D3DXVec2Minimize
VB_D3DXVec2Normalize
VB_D3DXVec2Scale
VB_D3DXVec2Subtract
VB_D3DXVec2Transform
VB_D3DXVec2TransformCoord
VB_D3DXVec2TransformNormal
VB_D3DXVec3Add
VB_D3DXVec3BaryCentric
VB_D3DXVec3CatmullRom
VB_D3DXVec3Cross
VB_D3DXVec3Dot
VB_D3DXVec3Hermite
VB_D3DXVec3Length
VB_D3DXVec3LengthSq
VB_D3DXVec3Lerp
VB_D3DXVec3Maximize
VB_D3DXVec3Minimize
VB_D3DXVec3Normalize
VB_D3DXVec3Project
VB_D3DXVec3Scale
VB_D3DXVec3Subtract
VB_D3DXVec3Transform
VB_D3DXVec3TransformCoord
VB_D3DXVec3TransformNormal
VB_D3DXVec3Unproject
VB_D3DXVec4Add
VB_D3DXVec4BaryCentric
VB_D3DXVec4CatmullRom
VB_D3DXVec4Cross
VB_D3DXVec4Dot
VB_D3DXVec4Hermite
VB_D3DXVec4Length
VB_D3DXVec4LengthSq
VB_D3DXVec4Lerp
VB_D3DXVec4Maximize
VB_D3DXVec4Minimize
VB_D3DXVec4Normalize
VB_D3DXVec4Scale
VB_D3DXVec4Subtract
VB_D3DXVec4Transform
VB_GetDataFromBuffer
VB_GetStringFromBuffer
VB_NewBuffer

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dx9w9x.cat
dxapi.sys
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_DxApi@20
_DxApiGetVersion@0

Sections

.text
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 32B - Virtual size: 5B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 128B - Virtual size: 99B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxdiabrz.chm
.chm
dxdiachs.chm
.chm
dxdiacht.chm
.chm
dxdiacze.chm
.chm
dxdiadut.chm
.chm
dxdiafrn.chm
.chm
dxdiag.chm
.chm
dxdiag.exe
.exe windows:5 windows x86 arch:x86

c8444b9db152f4c5d20c544b84a070de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxdiag.pdb

Imports

kernel32

GetVersionExA
WaitForMultipleObjects
WaitForSingleObject
SetEvent
GetCommandLineA
GetCurrentThreadId
FreeLibrary
LoadLibraryA
Sleep
CreateEventA
GetProcAddress
GetSystemInfo
MultiByteToWideChar
GetFullPathNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CompareFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcmpA
lstrcpyA
GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
DeleteCriticalSection
GetModuleFileNameA
GetFileAttributesA
InitializeCriticalSection
WideCharToMultiByte
GetCurrentDirectoryA
GetSystemDirectoryA
lstrlenW
TerminateProcess
GetWindowsDirectoryA
SetEndOfFile
ReadFile
CreateFileA
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
GetLocaleInfoA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
VirtualProtect
GetStringTypeW
GetStringTypeA
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
HeapSize
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
SetLastError
TlsFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
InterlockedDecrement
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
lstrlenA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
WriteFile
GetModuleHandleA
ExitProcess
CreateThread
GetLastError
TlsGetValue
TlsSetValue
ExitThread
RtlUnwind
HeapReAlloc
GetStartupInfoA

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegFlushKey
RegDeleteKeyA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueExA
RegCloseKey

gdi32

GetTextExtentPointA

user32

MessageBoxA
LoadStringA
EnableWindow
SendMessageA
GetDlgItem
wsprintfA
EndDialog
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetWindowsHookExA
UnhookWindowsHookEx
PostQuitMessage
UpdateWindow
GetClientRect
CreateDialogParamA
AdjustWindowRectEx
SetWindowPos
GetFocus
SetFocus
SetTimer
KillTimer
SetForegroundWindow
LoadIconA
CheckRadioButton
GetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
GetDC
ReleaseDC
SetWindowTextA
CheckDlgButton
ShowWindow
SetDlgItemTextA
DestroyWindow
GetKeyState
IsWindowEnabled
PostMessageA
CallNextHookEx
GetWindowLongA
DialogBoxParamA
GetWindowRect

comctl32

ImageList_ReplaceIcon
ImageList_Create
ord17
ImageList_Destroy

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeSecurity

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 728KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dxdiager.chm
.chm
dxdiagn.dll
.dll regsvr32 windows:5 windows x86 arch:x86

85607ebfb61c149821ac5a5700a70682

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dxdiagn.pdb

Imports

kernel32

FindFirstFileA
CloseHandle
CreateFileA
GetFullPathNameA
ExpandEnvironmentStringsA
lstrcmpiA
HeapFree
HeapAlloc
GetProcessHeap
GetPrivateProfileStringA
CompareStringA
GetSystemInfo
Sleep
SetPriorityClass
GetPriorityClass
GetCurrentProcess
GetProfileIntA
GlobalMemoryStatus
GetSystemDefaultLCID
GetLocalTime
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
GetTempPathA
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
FindClose
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
SystemTimeToFileTime
GetLocaleInfoA
GetCurrentDirectoryA
GetWindowsDirectoryA
OutputDebugStringA
GetModuleFileNameA
GetFileAttributesA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
FindResourceW
IsProcessorFeaturePresent
FlushFileBuffers
GetLocaleInfoW
ReadFile
SetStdHandle
RaiseException
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
VirtualProtect
GetCPInfo
GetOEMCP
SetEndOfFile
GetACP
VirtualQuery
InterlockedExchange
HeapSize
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetSystemDirectoryA
lstrcpyA
GetModuleHandleA
GetVersionExA
lstrcmpA
CompareStringW
GetLastError
lstrlenA
FreeLibrary
LoadLibraryA
UnhandledExceptionFilter
GetProcAddress
TlsAlloc
TlsGetValue
SetLastError
TlsFree
ExitProcess
RtlUnwind
HeapReAlloc
GetCommandLineA
TlsSetValue

advapi32

OpenSCManagerA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegDeleteKeyA
CloseServiceHandle
QueryServiceConfigA
RegOpenKeyA
RegCloseKey
OpenServiceA

user32

SystemParametersInfoA
GetWindowRect
GetSystemMetrics
CharNextA
GetDlgItemTextA
IntersectRect
OffsetRect
EnumDisplaySettingsA
ReleaseDC
GetDC
CharLowerBuffA
LoadStringA
FindWindowA
GetKeyboardType
LoadImageA
ShowWindow
DialogBoxParamA
SetForegroundWindow
PostMessageA
KillTimer
SetTimer
EndDialog
IsDlgButtonChecked
GetWindowTextA
MessageBoxA
SetWindowTextA
CheckRadioButton
EnableWindow
GetDlgItem
InflateRect
InvalidateRect
SetWindowPos
GetCursorPos
SetCursorPos
ShowCursor
SendMessageA
SetRect
PeekMessageA
GetWindowLongA
DefWindowProcA
RegisterClassA
CreateWindowExA

gdi32

GetDCOrgEx
GetClipBox
DeleteDC
CreateDCA
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
GetStockObject

winmm

waveOutGetDevCapsA
waveOutMessage
timeGetTime
mmioOpenA
mmioDescend
mmioRead
mmioClose

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CoTaskMemFree

oleaut32

VariantCopy
SafeArrayAccessData
SysFreeString
SafeArrayUnaccessData
SysAllocString
VariantClear
VariantInit

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 704KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 884KB - Virtual size: 882KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxdiaitn.chm
.chm
dxdiajpn.chm
.chm
dxdiakor.chm
.chm
dxdiapol.chm
.chm
dxdiarus.chm
.chm
dxdiaspa.chm
.chm
dxdiaswe.chm
.chm
dxdllreg.exe
.exe windows:5 windows x86 arch:x86

0c44b544bf09f2c523b928d57df20251

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dxdllreg.pdb

Imports

kernel32

GetLastError
FindClose
FindFirstFileA
lstrcpyA
lstrlenA
GetPrivateProfileSectionA
FreeLibrary
GetProcAddress
LoadLibraryExA
GetPrivateProfileStringA
GetSystemDirectoryA
lstrcmpiA
CreateMutexA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetWindowsDirectoryA
OutputDebugStringA
lstrcmpA
lstrcpynA
GetSystemInfo
VirtualProtect
ReadFile
GetProcessHeap
SetEndOfFile
GetStartupInfoA
GetCommandLineA
GetLocalTime
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA

setupapi

SetupCloseInfFile
SetupFindNextLine
SetupGetLineTextA
SetupFindFirstLineA
SetupOpenInfFileA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

ole32

CoInitialize

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dxdllreg.inf
dxmigr.dll
dxtmsft.dll
.dll regsvr32 windows:5 windows x86 arch:x86

c9cd26ae7abe9c1c280dbbd1211522a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_purecall
_onexit
__dllonexit
_adjust_fdiv
_initterm
labs
sqrt
_wcsicmp
wcslen
strcmp
_controlfp
malloc
pow
_ftol
sin
cos
free
??2@YAPAXI@Z
realloc
??3@YAXPAX@Z
memcpy
memcmp
_clearfp
_CIasin
_CIpow
_CIacos
wcscmp
memmove

kernel32

LoadResource
FindResourceA
SizeofResource
FreeLibrary
LoadLibraryExA
GetLastError
CloseHandle
GetVersion
GetSystemInfo
GetProcessHeap
GlobalFree
GlobalHandle
GlobalSize
GlobalAlloc
IsBadWritePtr
IsBadCodePtr
lstrcatA
IsBadReadPtr
GetModuleFileNameA
lstrcpyA
HeapDestroy
lstrlenA
DisableThreadLibraryCalls
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
lstrcmpiA
CreateEventA
lstrcpynA

user32

CharNextA
GetSystemMetrics
GetAsyncKeyState
GetSysColor
GetDC
ReleaseDC
IntersectRect

ole32

CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

VariantChangeType
LoadRegTypeLi
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarI4FromStr
SysStringByteLen
SysAllocString
SafeArrayAccessData
SafeArrayCreate
UnRegisterTypeLi
VariantCopyInd
VariantClear
VariantInit
SafeArrayUnaccessData

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA

gdi32

GetDeviceCaps

dxtrans

?DXDitherArray@@YGXPBUDXDITHERDESC@@@Z
?DXOverArrayMMX@@YGXPAVDXPMSAMPLE@@PBV1@K@Z
?DXOverArray@@YGXPAVDXPMSAMPLE@@PBV1@K@Z

shell32

ShellExecuteA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxtrans.dll
.dll regsvr32 windows:5 windows x86 arch:x86

d82b48d8792288ce391cff15677c8590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
TlsGetValue
TlsFree
TlsAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStdHandle
GetEnvironmentStrings
GetEnvironmentVariableA
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapSize
ExitProcess
TerminateProcess
CreateThread
GetEnvironmentStringsW
ExitThread
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
TlsSetValue
RtlUnwind
RaiseException
HeapAlloc
GetProcAddress
lstrcmpiA
UnhandledExceptionFilter
HeapFree
InterlockedIncrement
DisableThreadLibraryCalls
HeapReAlloc
GetCurrentDirectoryA
GetVersion
GetCommandLineA
ResetEvent
GetSystemInfo
CreateIoCompletionPort
QueueUserAPC
GetQueuedCompletionStatus
SetEvent
GetCPInfo
GetVersionExA
PostQueuedCompletionStatus
CreateSemaphoreA
WaitForMultipleObjects
GetACP
GetOEMCP
LoadLibraryA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetCurrentThreadId
GetLastError
CloseHandle
GetCurrentProcess
WaitForSingleObject
HeapDestroy
lstrcpyA
lstrcatA
GetModuleFileNameA
IsBadReadPtr
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
IsBadWritePtr
FreeLibrary
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
lstrcpynA
ReleaseSemaphore
CreateEventA
GetCurrentThread
IsBadCodePtr

ole32

CreateBindCtx
CreateFileMoniker
CoCreateFreeThreadedMarshaler
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

oleaut32

SysFreeString
SysAllocString
UnRegisterTypeLi
VarI4FromStr
LoadTypeLi
RegisterTypeLi

user32

GetDesktopWindow
GetDC
ReleaseDC
IntersectRect
LoadStringA
CharNextA

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

gdi32

DeleteDC
GetGlyphOutlineA
PolyBezierTo
LineTo
MoveToEx
DeleteObject
BeginPath
GetPaletteEntries
StrokePath
StrokeAndFillPath
FillPath
CreateBrushIndirect
SelectObject
SetPolyFillMode
CreateFontIndirectA
GetObjectA
ExtCreatePen
GetKerningPairsA
GetTextMetricsA
SetMapMode
CreateCompatibleDC
BitBlt
EndPath

ddraw

DirectDrawCreate

Exports

Exports

?DXConstOverArray@@YGXPAVDXPMSAMPLE@@ABV1@K@Z
?DXConstUnderArray@@YGXPAVDXPMSAMPLE@@ABV1@K@Z
?DXDitherArray@@YGXPBUDXDITHERDESC@@@Z
?DXLinearInterpolateArray@@YGXPBVDXBASESAMPLE@@PAUDXLIMAPINFO@@PAV1@K@Z
?DXOverArray@@YGXPAVDXPMSAMPLE@@PBV1@K@Z
?DXOverArrayMMX@@YGXPAVDXPMSAMPLE@@PBV1@K@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dxver.inf
dxw9xbrz.cat
dxw9xchs.cat
dxw9xcht.cat
dxw9xcze.cat
dxw9xdut.cat
dxw9xfrn.cat
dxw9xger.cat
dxw9xitn.cat
dxw9xjpn.cat
dxw9xkor.cat
dxw9xmig.inf
dxw9xpol.cat
dxw9xrus.cat
dxw9xspa.cat
dxw9xswe.cat
encapi.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7b51e9d3677f401a528065d95fdb10ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateEventA
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
DeviceIoControl
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetOverlappedResult
CloseHandle
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
InitializeCriticalSection
CreateThread
InterlockedExchange
MultiByteToWideChar
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA

msvcrt

_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z

advapi32

RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA

user32

wsprintfA

ole32

StringFromGUID2
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
IIDFromString
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysStringByteLen
SysStringLen
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gameenum.sys
.sys windows:5 windows x86 arch:x86

6ec049c91ee0bab4ea8f0a7d19b52943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

InterlockedDecrement
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
IoDeleteDevice
KeSetEvent
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoCreateDevice
ExFreePool
ObfReferenceObject
ExAllocatePoolWithTag
MmUnmapIoSpace
IoSetDeviceInterfaceState
IofCallDriver
KeWaitForSingleObject
IoAttachDeviceToDeviceStack
IoRegisterDeviceInterface
IofCompleteRequest
READ_REGISTER_UCHAR
WRITE_REGISTER_UCHAR
MmMapIoSpace
ObfDereferenceObject
swprintf
wcslen
RtlInitUnicodeString
RtlWriteRegistryValue
ZwQueryValueKey
ZwClose
ZwCreateKey
IoOpenDeviceInterfaceRegistryKey
IoInvalidateDeviceRelations
PoCallDriver
PoStartNextPowerIrp
PoSetPowerState
PoRequestPowerIrp
IoDetachDevice

hal

WRITE_PORT_UCHAR
READ_PORT_UCHAR
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gcdef.dll
.dll windows:5 windows x86 arch:x86

658a2c8d831730c6656a96194ef0fa1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

BringWindowToTop
IsIconic
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
FindWindowA
DestroyMenu
GetSysColorBrush
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
SetCursor
ShowOwnedPopups
GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SystemParametersInfoA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowPos
RegisterWindowMessageA
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
DestroyWindow
IsWindowEnabled
UnhookWindowsHookEx
SendDlgItemMessageA
IsDlgButtonChecked
CheckDlgButton
LoadCursorA
RegisterClassExA
DefWindowProcA
BeginPaint
EndPaint
LoadBitmapA
GetSysColor
GetDC
GetClientRect
FillRect
ReleaseDC
LoadIconA
DestroyIcon
MessageBoxA
DialogBoxParamA
GetParent
GetWindowLongA
PostMessageA
KillTimer
EndDialog
WinHelpA
SetWindowLongA
SetTimer
LoadStringA
wsprintfA
ShowWindow
EnableWindow
SetFocus
SetWindowTextA
GetDlgItem
UpdateWindow
InvalidateRect
SendMessageA

gdi32

Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
Ellipse
CreateSolidBrush
PaintRgn
GetRgnBox
CreatePolygonRgn
CreateCompatibleDC
GetMapMode
SetMapMode
GetObjectA
DPtoLP
BitBlt
DeleteDC
CreatePen
GetStockObject
SelectObject
MoveToEx
LineTo
DeleteObject

kernel32

WriteFile
GetVersionExA
GetProcessVersion
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
lstrcpynA
GetLastError
GetModuleFileNameA
GlobalAddAtomA
GlobalGetAtomNameA
GetCommandLineA
RtlUnwind
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
ExitProcess
GetModuleHandleA
GetACP
GetOEMCP
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GlobalUnlock
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
GlobalLock
GetCurrentThreadId
lstrcatA
GetVersion
lstrlenA
lstrcpyA
FormatMessageA
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
LocalAlloc
LocalFree
lstrcmpiA
lstrcmpA
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
SetLastError

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegEnumKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueA

comctl32

ord17
ImageList_Destroy

winmm

joyGetPosEx
joyGetDevCapsA
joyGetNumDevs
joyConfigChanged

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

shell32

DragFinish
DragQueryFileA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gchand.dll
.dll windows:5 windows x86 arch:x86

b94d3cce6eac29903c18cbe135eaf1e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord823
ord1574
ord825

msvcrt

?terminate@@YAXXZ
??1type_info@@UAE@XZ
malloc
wcslen
free
_except_handler3

ole32

CoGetClassObject

kernel32

InterlockedDecrement
lstrlenW
InterlockedIncrement

user32

ExitWindowsEx

comctl32

PropertySheetA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
gm16.dls
gmreadme.txt
hidgame.sys
.sys windows:5 windows x86 arch:x86

94c56b96139675e3e5ea28d6ec4d6e0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
ExReleaseFastMutex
ExAcquireFastMutex
KfReleaseSpinLock

ntoskrnl.exe

KeWaitForSingleObject
KeInitializeSpinLock
PoCallDriver
PoStartNextPowerIrp
InterlockedIncrement
InterlockedDecrement
KeTickCount
KeSetEvent
IofCompleteRequest
KeInitializeEvent
KeQueryTimeIncrement
IofCallDriver

hidclass.sys

HidRegisterMinidriver

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 832B - Virtual size: 832B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
joy.cpl
.dll windows:5 windows x86 arch:x86

c9a6a8528ed9c23f72acaa44d74df204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoCreateInstance
CoInitialize
CoGetClassObject
CoFreeUnusedLibraries
CoUninitialize

advapi32

RegEnumKeyExA
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
RegCreateKeyExA

dinput

DirectInputCreateA

kernel32

GetCommandLineA
HeapFree
RtlUnwind
HeapAlloc
RaiseException
HeapSize
HeapReAlloc
ExitProcess
GetModuleHandleA
GlobalGetAtomNameA
GetOEMCP
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GlobalAddAtomA
GetModuleFileNameA
FlushFileBuffers
SetFilePointer
WriteFile
lstrcpyA
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
Sleep
GlobalAlloc
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GlobalFlags
lstrcmpA
lstrcmpiA
lstrcpynA
SetLastError
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
lstrcatA
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateMutexA
GetLastError
GetVersion
ReleaseMutex
DisableThreadLibraryCalls
CreateProcessA
CloseHandle
lstrlenA
lstrlenW
GetACP

user32

GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
ShowScrollBar
SetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetActiveWindow
DispatchMessageA
PeekMessageA
GetSysColor
SystemParametersInfoA
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetActiveWindow
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetClassNameA
PtInRect
GetDesktopWindow
PostQuitMessage
GetSysColorBrush
ShowOwnedPopups
FindWindowA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
SetDlgItemTextA
LoadIconA
GetWindowTextA
EnableWindow
GetDC
ScreenToClient
SetForegroundWindow
GetKeyState
MessageBeep
UpdateWindow
RegisterWindowMessageA
KillTimer
SetTimer
IsWindowEnabled
ExitWindowsEx
MapWindowPoints
IsDlgButtonChecked
GetSystemMetrics
GetWindowRect
CreatePopupMenu
AppendMenuA
GetClientRect
ClientToScreen
TrackPopupMenu
DestroyMenu
WinHelpA
GetParent
DialogBoxParamA
IsWindowVisible
DestroyWindow
InvalidateRect
CheckRadioButton
SetWindowPos
GetDlgItemTextA
SetFocus
LoadImageA
EndDialog
DestroyIcon
GetWindowDC
ReleaseDC
GetWindowLongA
SetWindowLongA
RedrawWindow
IsWindow
PostMessageA
SendDlgItemMessageA
GetDlgItem
SendMessageA
LoadCursorA
SetCursor
LoadStringA
wsprintfA
MessageBoxA
CallWindowProcA
GetFocus

gdi32

GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SaveDC
SelectObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
DeleteDC
GetObjectA
SetBkColor
DeleteObject
RestoreDC
SetTextColor
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A

comctl32

ord17
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
CreatePropertySheetPageA
PropertySheetA

shell32

DragFinish
DragQueryFileA
ExtractIconExA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Exports

Exports

CPlApplet
ShowJoyCPL

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
joyhid.vxd
joystick.inf
jystkbrz.inf
jystkchs.inf
jystkcht.inf
jystkcze.inf
jystkdut.inf
jystkfrn.inf
jystkger.inf
jystkitn.inf
jystkjpn.inf
jystkkor.inf
jystkpol.inf
jystkrus.inf
jystkspa.inf
jystkswe.inf
ks.inf
ks.sys
.dll windows:5 windows x86 arch:x86

21a59e474a5dc891708dc0b0ea65fe46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ks.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExDeletePagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
ExInitializePagedLookasideList
KeInitializeSpinLock
ProbeForRead
IofCallDriver
IoBuildSynchronousFsdRequest
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
RtlFreeUnicodeString
wcscat
wcscpy
RtlStringFromGUID
IoGetRelatedDeviceObject
ObfReferenceObject
IoBuildDeviceIoControlRequest
ExGetPreviousMode
ZwEnumerateValueKey
ZwSetValueKey
RtlCompareMemory
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
ExQueueWorkItem
swprintf
wcslen
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IoSetDeviceInterfaceState
InterlockedExchange
KeSetTimer
IoInvalidateDeviceRelations
ExAllocatePoolWithQuotaTag
ProbeForWrite
IoGetDeviceProperty
DbgBreakPoint
DbgPrint
ZwEnumerateKey
ZwQueryKey
IoRegisterDeviceInterface
RtlGUIDFromString
_wcsicmp
IoDeleteDevice
IoCreateDevice
ZwDeleteKey
IoDetachDevice
IoAttachDeviceToDeviceStack
KeInitializeDpc
KeSetEvent
_wcsnicmp
KeCancelTimer
KeSetTimerEx
ExInterlockedCompareExchange64
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeQueryTimeIncrement
KeInitializeTimerEx
KeReleaseMutex
KeSynchronizeExecution
ObfDereferenceObject
KeRemoveQueueDpc
InterlockedCompareExchange
KeReleaseSemaphore
KeInsertQueueDpc
ExEventObjectType
ObReferenceObjectByHandle
ExSemaphoreObjectType
KeBugCheckEx
PoCallDriver
PoStartNextPowerIrp
KeGetCurrentThread
RtlCompareUnicodeString
IoCreateFile
MmMapLockedPages
KeClearEvent
ExRaiseStatus
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
KeInitializeMutex
IoFileObjectType
IoGetDeviceInterfaces
IoAllocateDriverObjectExtension
IoGetDriverObjectExtension
IoOpenDeviceRegistryKey
IoFreeIrp
IoAllocateIrp
_snwprintf
PoUnregisterSystemState
PoRegisterSystemState
IoIsWdmVersionAvailable
PoRequestPowerIrp
PoSetPowerState
IoOpenDeviceInterfaceRegistryKey
memmove
KeResetEvent
KeQuerySystemTime
_except_handler3
KeTickCount
KeWaitForSingleObject
IofCompleteRequest
InterlockedIncrement
InterlockedDecrement
ExFreePool
ExAllocatePoolWithTag
ExInterlockedPushEntrySList
KeInitializeTimer
ExInterlockedPopEntrySList

hal

KfLowerIrql
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KfRaiseIrql

Exports

Exports

??0CBaseUnknown@@QAE@ABU_GUID@@PAUIUnknown@@@Z
??0CBaseUnknown@@QAE@PAUIUnknown@@@Z
??1CBaseUnknown@@UAE@XZ
??_FCBaseUnknown@@QAEXXZ
?IndirectedAddRef@CBaseUnknown@@UAGKXZ
?IndirectedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?IndirectedRelease@CBaseUnknown@@UAGKXZ
?NonDelegatedAddRef@CBaseUnknown@@UAGKXZ
?NonDelegatedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?NonDelegatedRelease@CBaseUnknown@@UAGKXZ
DllInitialize
KoCreateInstance
KoDeviceInitialize
KoDriverInitialize
KoRelease
KsAcquireControl
KsAcquireDevice
KsAcquireDeviceSecurityLock
KsAcquireResetValue
KsAddDevice
KsAddEvent
KsAddIrpToCancelableQueue
KsAddItemToObjectBag
KsAddObjectCreateItemToDeviceHeader
KsAddObjectCreateItemToObjectHeader
KsAllocateDefaultClock
KsAllocateDefaultClockEx
KsAllocateDeviceHeader
KsAllocateExtraData
KsAllocateObjectBag
KsAllocateObjectCreateItem
KsAllocateObjectHeader
KsCacheMedium
KsCancelIo
KsCancelRoutine
KsCompletePendingRequest
KsCopyObjectBagItems
KsCreateAllocator
KsCreateBusEnumObject
KsCreateClock
KsCreateDefaultAllocator
KsCreateDefaultAllocatorEx
KsCreateDefaultClock
KsCreateDefaultSecurity
KsCreateDevice
KsCreateFilterFactory
KsCreatePin
KsCreateTopologyNode
KsDecrementCountedWorker
KsDefaultAddEventHandler
KsDefaultDeviceIoCompletion
KsDefaultDispatchPnp
KsDefaultDispatchPower
KsDefaultForwardIrp
KsDereferenceBusObject
KsDereferenceSoftwareBusObject
KsDeviceGetBusData
KsDeviceRegisterAdapterObject
KsDeviceSetBusData
KsDisableEvent
KsDiscardEvent
KsDispatchFastIoDeviceControlFailure
KsDispatchFastReadFailure
KsDispatchInvalidDeviceRequest
KsDispatchIrp
KsDispatchQuerySecurity
KsDispatchSetSecurity
KsDispatchSpecificMethod
KsDispatchSpecificProperty
KsEnableEvent
KsEnableEventWithAllocator
KsFastMethodHandler
KsFastPropertyHandler
KsFilterAcquireProcessingMutex
KsFilterAddTopologyConnections
KsFilterAttemptProcessing
KsFilterCreateNode
KsFilterCreatePinFactory
KsFilterFactoryAddCreateItem
KsFilterFactoryGetSymbolicLink
KsFilterFactorySetDeviceClassesState
KsFilterFactoryUpdateCacheData
KsFilterGetAndGate
KsFilterGetChildPinCount
KsFilterGetFirstChildPin
KsFilterRegisterPowerCallbacks
KsFilterReleaseProcessingMutex
KsForwardAndCatchIrp
KsForwardIrp
KsFreeDefaultClock
KsFreeDeviceHeader
KsFreeEventList
KsFreeObjectBag
KsFreeObjectCreateItem
KsFreeObjectCreateItemsByContext
KsFreeObjectHeader
KsGenerateDataEvent
KsGenerateEvent
KsGenerateEventList
KsGenerateEvents
KsGetBusEnumIdentifier
KsGetBusEnumParentFDOFromChildPDO
KsGetBusEnumPnpDeviceObject
KsGetDefaultClockState
KsGetDefaultClockTime
KsGetDevice
KsGetDeviceForDeviceObject
KsGetFilterFromIrp
KsGetFirstChild
KsGetNextSibling
KsGetNodeIdFromIrp
KsGetObjectFromFileObject
KsGetObjectTypeFromFileObject
KsGetObjectTypeFromIrp
KsGetOuterUnknown
KsGetParent
KsGetPinFromIrp
KsHandleSizedListQuery
KsIncrementCountedWorker
KsInitializeDevice
KsInitializeDriver
KsInstallBusEnumInterface
KsIsBusEnumChildDevice
KsMergeAutomationTables
KsMethodHandler
KsMethodHandlerWithAllocator
KsMoveIrpsOnCancelableQueue
KsNullDriverUnload
KsPinAcquireProcessingMutex
KsPinAttachAndGate
KsPinAttachOrGate
KsPinAttemptProcessing
KsPinDataIntersection
KsPinGetAndGate
KsPinGetAvailableByteCount
KsPinGetConnectedFilterInterface
KsPinGetConnectedPinDeviceObject
KsPinGetConnectedPinFileObject
KsPinGetConnectedPinInterface
KsPinGetCopyRelationships
KsPinGetFirstCloneStreamPointer
KsPinGetLeadingEdgeStreamPointer
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsPinGetReferenceClockInterface
KsPinGetTrailingEdgeStreamPointer
KsPinPropertyHandler
KsPinRegisterFrameReturnCallback
KsPinRegisterHandshakeCallback
KsPinRegisterIrpCompletionCallback
KsPinRegisterPowerCallbacks
KsPinReleaseProcessingMutex
KsPinSetPinClockTime
KsPinSubmitFrame
KsPinSubmitFrameMdl
KsProbeStreamIrp
KsProcessPinUpdate
KsPropertyHandler
KsPropertyHandlerWithAllocator
KsQueryDevicePnpObject
KsQueryInformationFile
KsQueryObjectAccessMask
KsQueryObjectCreateItem
KsQueueWorkItem
KsReadFile
KsRecalculateStackDepth
KsReferenceBusObject
KsReferenceSoftwareBusObject
KsRegisterAggregatedClientUnknown
KsRegisterCountedWorker
KsRegisterFilterWithNoKSPins
KsRegisterWorker
KsReleaseControl
KsReleaseDevice
KsReleaseDeviceSecurityLock
KsReleaseIrpOnCancelableQueue
KsRemoveBusEnumInterface
KsRemoveIrpFromCancelableQueue
KsRemoveItemFromObjectBag
KsRemoveSpecificIrpFromCancelableQueue
KsServiceBusEnumCreateRequest
KsServiceBusEnumPnpRequest
KsSetDefaultClockState
KsSetDefaultClockTime
KsSetDevicePnpAndBaseObject
KsSetInformationFile
KsSetMajorFunctionHandler
KsSetPowerDispatch
KsSetTargetDeviceObject
KsSetTargetState
KsStreamIo
KsStreamPointerAdvance
KsStreamPointerAdvanceOffsets
KsStreamPointerAdvanceOffsetsAndUnlock
KsStreamPointerCancelTimeout
KsStreamPointerClone
KsStreamPointerDelete
KsStreamPointerGetIrp
KsStreamPointerGetMdl
KsStreamPointerGetNextClone
KsStreamPointerLock
KsStreamPointerScheduleTimeout
KsStreamPointerSetStatusCode
KsStreamPointerUnlock
KsSynchronousIoControlDevice
KsTerminateDevice
KsTopologyPropertyHandler
KsUnregisterWorker
KsUnserializeObjectPropertiesFromRegistry
KsValidateAllocatorCreateRequest
KsValidateAllocatorFramingEx
KsValidateClockCreateRequest
KsValidateConnectRequest
KsValidateTopologyNodeCreateRequest
KsWriteFile
KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetTime
KsiQueryObjectCreateItemsPresent
_KsEdit

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ks98.inf
ks98.sys
.dll windows:5 windows x86 arch:x86

35f91fb82ef1dedbe8e11940592e982b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ks.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExDeletePagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
ExInitializePagedLookasideList
KeInitializeSpinLock
ProbeForRead
IofCallDriver
IoBuildSynchronousFsdRequest
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
RtlFreeUnicodeString
wcscat
wcscpy
RtlStringFromGUID
IoGetRelatedDeviceObject
ObfReferenceObject
IoBuildDeviceIoControlRequest
ExGetPreviousMode
ZwEnumerateValueKey
ZwSetValueKey
RtlCompareMemory
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
ExQueueWorkItem
swprintf
wcslen
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IoSetDeviceInterfaceState
InterlockedExchange
KeSetTimer
IoInvalidateDeviceRelations
ExAllocatePoolWithQuotaTag
ProbeForWrite
IoGetDeviceProperty
DbgPrint
ZwEnumerateKey
ZwQueryKey
IoRegisterDeviceInterface
RtlGUIDFromString
_wcsicmp
IoDeleteDevice
IoCreateDevice
ZwDeleteKey
IoDetachDevice
IoAttachDeviceToDeviceStack
KeSetEvent
KeInitializeTimer
_wcsnicmp
KeCancelTimer
KeSetTimerEx
ExInterlockedCompareExchange64
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeQueryTimeIncrement
KeInitializeTimerEx
KeReleaseMutex
KeSynchronizeExecution
ObfDereferenceObject
KeRemoveQueueDpc
InterlockedCompareExchange
KeReleaseSemaphore
KeInsertQueueDpc
ExEventObjectType
ObReferenceObjectByHandle
ExSemaphoreObjectType
KeBugCheckEx
PoCallDriver
PoStartNextPowerIrp
KeGetCurrentThread
RtlCompareUnicodeString
IoCreateFile
MmMapLockedPages
KeClearEvent
ExRaiseStatus
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
KeInitializeMutex
IoFileObjectType
IoGetDeviceInterfaces
IoAllocateDriverObjectExtension
IoGetDriverObjectExtension
IoOpenDeviceRegistryKey
IoFreeIrp
IoAllocateIrp
_snwprintf
IoIsWdmVersionAvailable
PoRequestPowerIrp
PoSetPowerState
IoOpenDeviceInterfaceRegistryKey
memmove
KeResetEvent
KeQuerySystemTime
_except_handler3
KeTickCount
KeWaitForSingleObject
IofCompleteRequest
InterlockedIncrement
InterlockedDecrement
ExFreePool
ExAllocatePoolWithTag
ExInterlockedPushEntrySList
KeInitializeDpc
ExInterlockedPopEntrySList

hal

KfLowerIrql
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KfRaiseIrql

Exports

Exports

??0CBaseUnknown@@QAE@ABU_GUID@@PAUIUnknown@@@Z
??0CBaseUnknown@@QAE@PAUIUnknown@@@Z
??1CBaseUnknown@@UAE@XZ
??_FCBaseUnknown@@QAEXXZ
?IndirectedAddRef@CBaseUnknown@@UAGKXZ
?IndirectedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?IndirectedRelease@CBaseUnknown@@UAGKXZ
?NonDelegatedAddRef@CBaseUnknown@@UAGKXZ
?NonDelegatedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?NonDelegatedRelease@CBaseUnknown@@UAGKXZ
DllInitialize
KoCreateInstance
KoDeviceInitialize
KoDriverInitialize
KoRelease
KsAcquireControl
KsAcquireDevice
KsAcquireDeviceSecurityLock
KsAcquireResetValue
KsAddDevice
KsAddEvent
KsAddIrpToCancelableQueue
KsAddItemToObjectBag
KsAddObjectCreateItemToDeviceHeader
KsAddObjectCreateItemToObjectHeader
KsAllocateDefaultClock
KsAllocateDefaultClockEx
KsAllocateDeviceHeader
KsAllocateExtraData
KsAllocateObjectBag
KsAllocateObjectCreateItem
KsAllocateObjectHeader
KsCacheMedium
KsCancelIo
KsCancelRoutine
KsCompletePendingRequest
KsCopyObjectBagItems
KsCreateAllocator
KsCreateBusEnumObject
KsCreateClock
KsCreateDefaultAllocator
KsCreateDefaultAllocatorEx
KsCreateDefaultClock
KsCreateDefaultSecurity
KsCreateDevice
KsCreateFilterFactory
KsCreatePin
KsCreateTopologyNode
KsDecrementCountedWorker
KsDefaultAddEventHandler
KsDefaultDeviceIoCompletion
KsDefaultDispatchPnp
KsDefaultDispatchPower
KsDefaultForwardIrp
KsDereferenceBusObject
KsDereferenceSoftwareBusObject
KsDeviceGetBusData
KsDeviceRegisterAdapterObject
KsDeviceSetBusData
KsDisableEvent
KsDiscardEvent
KsDispatchFastIoDeviceControlFailure
KsDispatchFastReadFailure
KsDispatchInvalidDeviceRequest
KsDispatchIrp
KsDispatchQuerySecurity
KsDispatchSetSecurity
KsDispatchSpecificMethod
KsDispatchSpecificProperty
KsEnableEvent
KsEnableEventWithAllocator
KsFastMethodHandler
KsFastPropertyHandler
KsFilterAcquireProcessingMutex
KsFilterAddTopologyConnections
KsFilterAttemptProcessing
KsFilterCreateNode
KsFilterCreatePinFactory
KsFilterFactoryAddCreateItem
KsFilterFactoryGetSymbolicLink
KsFilterFactorySetDeviceClassesState
KsFilterFactoryUpdateCacheData
KsFilterGetAndGate
KsFilterGetChildPinCount
KsFilterGetFirstChildPin
KsFilterRegisterPowerCallbacks
KsFilterReleaseProcessingMutex
KsForwardAndCatchIrp
KsForwardIrp
KsFreeDefaultClock
KsFreeDeviceHeader
KsFreeEventList
KsFreeObjectBag
KsFreeObjectCreateItem
KsFreeObjectCreateItemsByContext
KsFreeObjectHeader
KsGenerateDataEvent
KsGenerateEvent
KsGenerateEventList
KsGenerateEvents
KsGetBusEnumIdentifier
KsGetBusEnumParentFDOFromChildPDO
KsGetBusEnumPnpDeviceObject
KsGetDefaultClockState
KsGetDefaultClockTime
KsGetDevice
KsGetDeviceForDeviceObject
KsGetFilterFromIrp
KsGetFirstChild
KsGetNextSibling
KsGetNodeIdFromIrp
KsGetObjectFromFileObject
KsGetObjectTypeFromFileObject
KsGetObjectTypeFromIrp
KsGetOuterUnknown
KsGetParent
KsGetPinFromIrp
KsHandleSizedListQuery
KsIncrementCountedWorker
KsInitializeDevice
KsInitializeDriver
KsInstallBusEnumInterface
KsIsBusEnumChildDevice
KsMergeAutomationTables
KsMethodHandler
KsMethodHandlerWithAllocator
KsMoveIrpsOnCancelableQueue
KsNullDriverUnload
KsPinAcquireProcessingMutex
KsPinAttachAndGate
KsPinAttachOrGate
KsPinAttemptProcessing
KsPinDataIntersection
KsPinGetAndGate
KsPinGetAvailableByteCount
KsPinGetConnectedFilterInterface
KsPinGetConnectedPinDeviceObject
KsPinGetConnectedPinFileObject
KsPinGetConnectedPinInterface
KsPinGetCopyRelationships
KsPinGetFirstCloneStreamPointer
KsPinGetLeadingEdgeStreamPointer
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsPinGetReferenceClockInterface
KsPinGetTrailingEdgeStreamPointer
KsPinPropertyHandler
KsPinRegisterFrameReturnCallback
KsPinRegisterHandshakeCallback
KsPinRegisterIrpCompletionCallback
KsPinRegisterPowerCallbacks
KsPinReleaseProcessingMutex
KsPinSetPinClockTime
KsPinSubmitFrame
KsPinSubmitFrameMdl
KsProbeStreamIrp
KsProcessPinUpdate
KsPropertyHandler
KsPropertyHandlerWithAllocator
KsQueryDevicePnpObject
KsQueryInformationFile
KsQueryObjectAccessMask
KsQueryObjectCreateItem
KsQueueWorkItem
KsReadFile
KsRecalculateStackDepth
KsReferenceBusObject
KsReferenceSoftwareBusObject
KsRegisterAggregatedClientUnknown
KsRegisterCountedWorker
KsRegisterFilterWithNoKSPins
KsRegisterWorker
KsReleaseControl
KsReleaseDevice
KsReleaseDeviceSecurityLock
KsReleaseIrpOnCancelableQueue
KsRemoveBusEnumInterface
KsRemoveIrpFromCancelableQueue
KsRemoveItemFromObjectBag
KsRemoveSpecificIrpFromCancelableQueue
KsServiceBusEnumCreateRequest
KsServiceBusEnumPnpRequest
KsSetDefaultClockState
KsSetDefaultClockTime
KsSetDevicePnpAndBaseObject
KsSetInformationFile
KsSetMajorFunctionHandler
KsSetPowerDispatch
KsSetTargetDeviceObject
KsSetTargetState
KsStreamIo
KsStreamPointerAdvance
KsStreamPointerAdvanceOffsets
KsStreamPointerAdvanceOffsetsAndUnlock
KsStreamPointerCancelTimeout
KsStreamPointerClone
KsStreamPointerDelete
KsStreamPointerGetIrp
KsStreamPointerGetMdl
KsStreamPointerGetNextClone
KsStreamPointerLock
KsStreamPointerScheduleTimeout
KsStreamPointerSetStatusCode
KsStreamPointerUnlock
KsSynchronousIoControlDevice
KsTerminateDevice
KsTopologyPropertyHandler
KsUnregisterWorker
KsUnserializeObjectPropertiesFromRegistry
KsValidateAllocatorCreateRequest
KsValidateAllocatorFramingEx
KsValidateClockCreateRequest
KsValidateConnectRequest
KsValidateTopologyNodeCreateRequest
KsWriteFile
KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetTime
KsiQueryObjectCreateItemsPresent
_KsEdit

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kscaptur.inf
ksfilt98.inf
ksfilter.inf
ksolay.ax
.dll regsvr32 windows:5 windows x86 arch:x86

96a838db2ca9c5febf5b77f383b5f7ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleFileNameA
lstrlenA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetVersionExA
QueryPerformanceCounter
GetLastError
MultiByteToWideChar

ksproxy.ax

KsSynchronousDeviceControl

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z

advapi32

RegSetValueA
RegCloseKey
RegEnumKeyExA
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA

user32

DefWindowProcA
ShowCursor
EndPaint
ReleaseDC
GetDC
GetClientRect
UnregisterClassA
BeginPaint
wsprintfA
GetMonitorInfoA
EnumDisplaySettingsA
EnumDisplayDevicesA
SendMessageA
DestroyWindow
RegisterClassExA
CreateWindowExA

gdi32

SetBkColor
ExtTextOutA

ole32

CoCreateInstance
CoInitialize
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksproxy.ax
.dll regsvr32 windows:5 windows x86 arch:x86

8a9244974f0e29124f9a788299082510

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
wcslen
_CIpow
swscanf
swprintf
_ftol
sprintf
_purecall
_except_handler3
??2@YAPAXI@Z
memmove
wcscpy

kernel32

GetACP
InterlockedCompareExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetLastError
CreateEventA
CloseHandle
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CreateThread
CreateFileA
WideCharToMultiByte
ReleaseSemaphore
InterlockedExchange
CreateSemaphoreA
InterlockedDecrement
DeviceIoControl
InterlockedIncrement
ResetEvent
GetOverlappedResult
MultiByteToWideChar
CreateMutexA
ReleaseMutex
GetHandleInformation
GetVersionExA
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryA
lstrlenA
GetModuleFileNameA
WaitForMultipleObjects
WaitForSingleObject
GetSystemInfo
VirtualFree
VirtualAlloc
GetProcAddress
ResumeThread
SetThreadPriority

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA

user32

wsprintfA
wvsprintfA

ole32

CoUninitialize
IIDFromString
CoCreateInstance
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
StringFromGUID2

oleaut32

SysFreeString

setupapi

SetupDiOpenDeviceInterfaceA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiCreateDeviceInfoListExA
SetupDiGetClassDevsA

ksuser

KsCreatePin
KsCreateTopologyNode
KsCreateAllocator
KsCreateClock

ntdll

RtlNtStatusToDosError

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KsGetMediaType
KsGetMediaTypeCount
KsGetMultiplePinFactoryItems
KsOpenDefaultDevice
KsResolveRequiredAttributes
KsSynchronousDeviceControl

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ksse.sys
.dll windows:5 windows x86 arch:x86

21a59e474a5dc891708dc0b0ea65fe46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ks.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExDeletePagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
ExInitializePagedLookasideList
KeInitializeSpinLock
ProbeForRead
IofCallDriver
IoBuildSynchronousFsdRequest
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
RtlFreeUnicodeString
wcscat
wcscpy
RtlStringFromGUID
IoGetRelatedDeviceObject
ObfReferenceObject
IoBuildDeviceIoControlRequest
ExGetPreviousMode
ZwEnumerateValueKey
ZwSetValueKey
RtlCompareMemory
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
ExQueueWorkItem
swprintf
wcslen
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IoSetDeviceInterfaceState
InterlockedExchange
KeSetTimer
IoInvalidateDeviceRelations
ExAllocatePoolWithQuotaTag
ProbeForWrite
IoGetDeviceProperty
DbgBreakPoint
DbgPrint
ZwEnumerateKey
ZwQueryKey
IoRegisterDeviceInterface
RtlGUIDFromString
_wcsicmp
IoDeleteDevice
IoCreateDevice
ZwDeleteKey
IoDetachDevice
IoAttachDeviceToDeviceStack
KeInitializeDpc
KeSetEvent
_wcsnicmp
KeCancelTimer
KeSetTimerEx
ExInterlockedCompareExchange64
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeQueryTimeIncrement
KeInitializeTimerEx
KeReleaseMutex
KeSynchronizeExecution
ObfDereferenceObject
KeRemoveQueueDpc
InterlockedCompareExchange
KeReleaseSemaphore
KeInsertQueueDpc
ExEventObjectType
ObReferenceObjectByHandle
ExSemaphoreObjectType
KeBugCheckEx
PoCallDriver
PoStartNextPowerIrp
KeGetCurrentThread
RtlCompareUnicodeString
IoCreateFile
MmMapLockedPages
KeClearEvent
ExRaiseStatus
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ExfInterlockedRemoveHeadList
ExfInterlockedInsertTailList
KeInitializeMutex
IoFileObjectType
IoGetDeviceInterfaces
IoAllocateDriverObjectExtension
IoGetDriverObjectExtension
IoOpenDeviceRegistryKey
IoFreeIrp
IoAllocateIrp
_snwprintf
PoUnregisterSystemState
PoRegisterSystemState
IoIsWdmVersionAvailable
PoRequestPowerIrp
PoSetPowerState
IoOpenDeviceInterfaceRegistryKey
memmove
KeResetEvent
KeQuerySystemTime
_except_handler3
KeTickCount
KeWaitForSingleObject
IofCompleteRequest
InterlockedIncrement
InterlockedDecrement
ExFreePool
ExAllocatePoolWithTag
ExInterlockedPushEntrySList
KeInitializeTimer
ExInterlockedPopEntrySList

hal

KfLowerIrql
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter
KfRaiseIrql

Exports

Exports

??0CBaseUnknown@@QAE@ABU_GUID@@PAUIUnknown@@@Z
??0CBaseUnknown@@QAE@PAUIUnknown@@@Z
??1CBaseUnknown@@UAE@XZ
??_FCBaseUnknown@@QAEXXZ
?IndirectedAddRef@CBaseUnknown@@UAGKXZ
?IndirectedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?IndirectedRelease@CBaseUnknown@@UAGKXZ
?NonDelegatedAddRef@CBaseUnknown@@UAGKXZ
?NonDelegatedQueryInterface@CBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?NonDelegatedRelease@CBaseUnknown@@UAGKXZ
DllInitialize
KoCreateInstance
KoDeviceInitialize
KoDriverInitialize
KoRelease
KsAcquireControl
KsAcquireDevice
KsAcquireDeviceSecurityLock
KsAcquireResetValue
KsAddDevice
KsAddEvent
KsAddIrpToCancelableQueue
KsAddItemToObjectBag
KsAddObjectCreateItemToDeviceHeader
KsAddObjectCreateItemToObjectHeader
KsAllocateDefaultClock
KsAllocateDefaultClockEx
KsAllocateDeviceHeader
KsAllocateExtraData
KsAllocateObjectBag
KsAllocateObjectCreateItem
KsAllocateObjectHeader
KsCacheMedium
KsCancelIo
KsCancelRoutine
KsCompletePendingRequest
KsCopyObjectBagItems
KsCreateAllocator
KsCreateBusEnumObject
KsCreateClock
KsCreateDefaultAllocator
KsCreateDefaultAllocatorEx
KsCreateDefaultClock
KsCreateDefaultSecurity
KsCreateDevice
KsCreateFilterFactory
KsCreatePin
KsCreateTopologyNode
KsDecrementCountedWorker
KsDefaultAddEventHandler
KsDefaultDeviceIoCompletion
KsDefaultDispatchPnp
KsDefaultDispatchPower
KsDefaultForwardIrp
KsDereferenceBusObject
KsDereferenceSoftwareBusObject
KsDeviceGetBusData
KsDeviceRegisterAdapterObject
KsDeviceSetBusData
KsDisableEvent
KsDiscardEvent
KsDispatchFastIoDeviceControlFailure
KsDispatchFastReadFailure
KsDispatchInvalidDeviceRequest
KsDispatchIrp
KsDispatchQuerySecurity
KsDispatchSetSecurity
KsDispatchSpecificMethod
KsDispatchSpecificProperty
KsEnableEvent
KsEnableEventWithAllocator
KsFastMethodHandler
KsFastPropertyHandler
KsFilterAcquireProcessingMutex
KsFilterAddTopologyConnections
KsFilterAttemptProcessing
KsFilterCreateNode
KsFilterCreatePinFactory
KsFilterFactoryAddCreateItem
KsFilterFactoryGetSymbolicLink
KsFilterFactorySetDeviceClassesState
KsFilterFactoryUpdateCacheData
KsFilterGetAndGate
KsFilterGetChildPinCount
KsFilterGetFirstChildPin
KsFilterRegisterPowerCallbacks
KsFilterReleaseProcessingMutex
KsForwardAndCatchIrp
KsForwardIrp
KsFreeDefaultClock
KsFreeDeviceHeader
KsFreeEventList
KsFreeObjectBag
KsFreeObjectCreateItem
KsFreeObjectCreateItemsByContext
KsFreeObjectHeader
KsGenerateDataEvent
KsGenerateEvent
KsGenerateEventList
KsGenerateEvents
KsGetBusEnumIdentifier
KsGetBusEnumParentFDOFromChildPDO
KsGetBusEnumPnpDeviceObject
KsGetDefaultClockState
KsGetDefaultClockTime
KsGetDevice
KsGetDeviceForDeviceObject
KsGetFilterFromIrp
KsGetFirstChild
KsGetNextSibling
KsGetNodeIdFromIrp
KsGetObjectFromFileObject
KsGetObjectTypeFromFileObject
KsGetObjectTypeFromIrp
KsGetOuterUnknown
KsGetParent
KsGetPinFromIrp
KsHandleSizedListQuery
KsIncrementCountedWorker
KsInitializeDevice
KsInitializeDriver
KsInstallBusEnumInterface
KsIsBusEnumChildDevice
KsMergeAutomationTables
KsMethodHandler
KsMethodHandlerWithAllocator
KsMoveIrpsOnCancelableQueue
KsNullDriverUnload
KsPinAcquireProcessingMutex
KsPinAttachAndGate
KsPinAttachOrGate
KsPinAttemptProcessing
KsPinDataIntersection
KsPinGetAndGate
KsPinGetAvailableByteCount
KsPinGetConnectedFilterInterface
KsPinGetConnectedPinDeviceObject
KsPinGetConnectedPinFileObject
KsPinGetConnectedPinInterface
KsPinGetCopyRelationships
KsPinGetFirstCloneStreamPointer
KsPinGetLeadingEdgeStreamPointer
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsPinGetReferenceClockInterface
KsPinGetTrailingEdgeStreamPointer
KsPinPropertyHandler
KsPinRegisterFrameReturnCallback
KsPinRegisterHandshakeCallback
KsPinRegisterIrpCompletionCallback
KsPinRegisterPowerCallbacks
KsPinReleaseProcessingMutex
KsPinSetPinClockTime
KsPinSubmitFrame
KsPinSubmitFrameMdl
KsProbeStreamIrp
KsProcessPinUpdate
KsPropertyHandler
KsPropertyHandlerWithAllocator
KsQueryDevicePnpObject
KsQueryInformationFile
KsQueryObjectAccessMask
KsQueryObjectCreateItem
KsQueueWorkItem
KsReadFile
KsRecalculateStackDepth
KsReferenceBusObject
KsReferenceSoftwareBusObject
KsRegisterAggregatedClientUnknown
KsRegisterCountedWorker
KsRegisterFilterWithNoKSPins
KsRegisterWorker
KsReleaseControl
KsReleaseDevice
KsReleaseDeviceSecurityLock
KsReleaseIrpOnCancelableQueue
KsRemoveBusEnumInterface
KsRemoveIrpFromCancelableQueue
KsRemoveItemFromObjectBag
KsRemoveSpecificIrpFromCancelableQueue
KsServiceBusEnumCreateRequest
KsServiceBusEnumPnpRequest
KsSetDefaultClockState
KsSetDefaultClockTime
KsSetDevicePnpAndBaseObject
KsSetInformationFile
KsSetMajorFunctionHandler
KsSetPowerDispatch
KsSetTargetDeviceObject
KsSetTargetState
KsStreamIo
KsStreamPointerAdvance
KsStreamPointerAdvanceOffsets
KsStreamPointerAdvanceOffsetsAndUnlock
KsStreamPointerCancelTimeout
KsStreamPointerClone
KsStreamPointerDelete
KsStreamPointerGetIrp
KsStreamPointerGetMdl
KsStreamPointerGetNextClone
KsStreamPointerLock
KsStreamPointerScheduleTimeout
KsStreamPointerSetStatusCode
KsStreamPointerUnlock
KsSynchronousIoControlDevice
KsTerminateDevice
KsTopologyPropertyHandler
KsUnregisterWorker
KsUnserializeObjectPropertiesFromRegistry
KsValidateAllocatorCreateRequest
KsValidateAllocatorFramingEx
KsValidateClockCreateRequest
KsValidateConnectRequest
KsValidateTopologyNodeCreateRequest
KsWriteFile
KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetTime
KsiQueryObjectCreateItemsPresent
_KsEdit

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kssetup.inf
ksuser.dll
.dll windows:5 windows x86 arch:x86

407f14f3ab3229ce994109fc31901c00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree

ntdll

NtCreateFile
RtlNtStatusToDosError

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
l3codecx.ax
.dll regsvr32 windows:4 windows x86 arch:x86

d7e8a0cc68dc418d56e7942bed824e2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall

kernel32

InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary
InterlockedDecrement
GetLastError
MulDiv
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
MultiByteToWideChar
lstrlenA
GetModuleFileNameA

advapi32

RegEnumKeyExA
RegSetValueA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegOpenKeyExA

user32

SetDlgItemTextA
wsprintfA
GetSysColor
KillTimer
SetTimer
SetDlgItemInt
GetWindowLongA
SetWindowLongA
CreateDialogParamA
MoveWindow
InvalidateRect
DestroyWindow
DefWindowProcA
CheckRadioButton
LoadStringA
LoadStringW
GetWindowRect
GetDesktopWindow
GetDlgItem
ShowWindow
EnableWindow

gdi32

DeleteObject
SetTextColor
CreateSolidBrush
SetBkColor

ole32

CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
license.txt
mciqtz.drv
mciqtz32.dll
.dll windows:5 windows x86 arch:x86

6f7fd37396bca471f8c746fbbf6b8d0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
GetProcAddress
MulDiv
MultiByteToWideChar
lstrlenA
GetModuleHandleA
LocalFree
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventA
CreateThread
WaitForMultipleObjects
CloseHandle
SetEvent
WideCharToMultiByte
ResetEvent
DisableThreadLibraryCalls
WaitForSingleObject

user32

GetWindowLongA
GetSystemMetrics
SetWindowTextA
SetForegroundWindow
UnregisterClassA
DestroyWindow
WindowFromDC
EndPaint
BeginPaint
DefWindowProcA
SetWindowLongA
RegisterClassA
LoadCursorA
SetRectEmpty
PostMessageA
LoadStringW
InSendMessage
GetWindowTextA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
GetClientRect
CreateWindowExA
GetWindowRect
AdjustWindowRect
IsWindow
IsIconic
IsZoomed
ShowWindow
IsWindowVisible
SetWindowPos
SendMessageA
ScreenToClient

winmm

mciFreeCommandResource
GetDriverModuleHandle
DefDriverProc
mciGetDriverData
mciLoadCommandResource
mciSetDriverData
mciDriverYield

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

gdi32

CreatePalette
GetObjectType
SetStretchBltMode
SelectPalette
RealizePalette
StretchDIBits
GetStockObject
DeleteObject

quartz

DBToAmpFactor
AmpFactorToDB

Exports

Exports

DriverProc
MCIEntry32

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
migrate.dll
.dll windows:5 windows x86 arch:x86

19a2836e5f2b2687a96991b9a3eb7c59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_DLL

PDB Paths

migrate.pdb

Imports

kernel32

lstrcpynA
GetWindowsDirectoryA
lstrcmpiA
DeleteFileA
lstrlenA
GetLastError
GetFileAttributesA
HeapFree
GetPrivateProfileSectionA
HeapReAlloc
HeapAlloc
HeapCreate
FindClose
FindNextFileA
WritePrivateProfileStringA
FindFirstFileA
GetSystemDirectoryA
MoveFileA
lstrcatA
lstrcpyA
HeapDestroy
DisableThreadLibraryCalls
GetModuleFileNameA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
InterlockedExchange
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
CloseHandle
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
LoadLibraryA
SetStdHandle
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

LoadStringA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

shell32

SHFileOperationA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpg2splt.ax
.dll regsvr32 windows:5 windows x86 arch:x86

7506cadb3101234ca71464cd166661ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
MulDiv
CreateThread
SetThreadPriority
InterlockedExchange
GetACP
WideCharToMultiByte
VirtualAlloc
CreateSemaphoreA
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ResetEvent
SetEvent
CreateEventA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
GetLastError
MultiByteToWideChar
GetVersionExA
lstrlenA

msvcrt

free
??2@YAPAXI@Z
_purecall
wcscpy
wcslen
_wcsicmp
_except_handler3
_itow
malloc
??3@YAXPAX@Z
_ftol
qsort
memmove

user32

wvsprintfA
wsprintfA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA

ole32

CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree

winmm

timeBeginPeriod
timeGetDevCaps
timeGetTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msanalog.vxd
msdmo.dll
.dll windows:5 windows x86 arch:x86

9dc9c166118bb224232425dd36ebb31e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
Sleep
lstrlenA
GetCurrentProcess
WideCharToMultiByte

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
_adjust_fdiv
_initterm
swprintf
sprintf
wcslen
wcscpy
realloc
free
malloc
sscanf

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

advapi32

RegDeleteKeyA
RegEnumKeyA
RegQueryInfoKeyA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueA
RegQueryValueA
RegCloseKey

user32

wsprintfA

Exports

Exports

DMOEnum
DMOGetName
DMOGetTypes
DMOGuidToStrA
DMOGuidToStrW
DMORegister
DMOStrToGuidA
DMOStrToGuidW
DMOUnregister
MoCopyMediaType
MoCreateMediaType
MoDeleteMediaType
MoDuplicateMediaType
MoFreeMediaType
MoInitMediaType

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msjstick.drv
mskssrv.sys
.sys windows:5 windows x86 arch:x86

ae7af65c91def368b78cf6daaa295831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mskssrv.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
ExFreePool
ExAllocatePoolWithTag
memmove
RtlCompareMemory
ObfDereferenceObject
ZwSetValueKey
ZwClose
ObReferenceObjectByHandle
IoFileObjectType
IoCreateFile
ZwQueryValueKey
IoOpenDeviceInterfaceRegistryKey
RtlInitUnicodeString
IofCompleteRequest
KeTickCount
KeBugCheckEx

ks.sys

KsQueryDevicePnpObject
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSynchronousIoControlDevice
KsCacheMedium
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsPropertyHandler
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 384B - Virtual size: 316B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspclock.98
.sys windows:5 windows x86 arch:x86

a38e3fcf8a1b447f8cb1c7fe185f87bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspclock.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IofCompleteRequest
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetTime
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSetDefaultClockTime
KsSetDefaultClockState
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsAllocateDefaultClock
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsFreeDefaultClock
KsFreeEventList
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspclock.se
.sys windows:5 windows x86 arch:x86

80ceafa87487c2a1e5e0a913df0055d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspclock.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
IofCompleteRequest
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetTime
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSetDefaultClockTime
KsSetDefaultClockState
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsAllocateDefaultClock
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsFreeDefaultClock
KsFreeEventList
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mspclock.sys
.sys windows:5 windows x86 arch:x86

80ceafa87487c2a1e5e0a913df0055d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspclock.pdb

Imports

ntoskrnl.exe

IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
IofCompleteRequest
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsiDefaultClockAddMarkEvent
KsiPropertyDefaultClockGetFunctionTable
KsiPropertyDefaultClockGetState
KsiPropertyDefaultClockGetResolution
KsiPropertyDefaultClockGetCorrelatedPhysicalTime
KsiPropertyDefaultClockGetCorrelatedTime
KsiPropertyDefaultClockGetPhysicalTime
KsiPropertyDefaultClockGetTime
KsSetDevicePnpAndBaseObject
KsAllocateDeviceHeader
KsSetDefaultClockTime
KsSetDefaultClockState
KsDereferenceSoftwareBusObject
KsAllocateObjectHeader
KsAllocateDefaultClock
KsReferenceSoftwareBusObject
KsFreeObjectHeader
KsFreeDefaultClock
KsFreeEventList
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsNullDriverUnload
KsSetMajorFunctionHandler
KsDefaultForwardIrp
KsDefaultDispatchPower
KsDefaultDispatchPnp

Sections

.text
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mstee.sys
.sys windows:5 windows x86 arch:x86

ba17250f7c9c0536bc777562ff599d7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mstee.pdb

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
RtlCompareMemory
KeTickCount
ExFreePool

ks.sys

KsInitializeDriver
KsFilterGetFirstChildPin
_KsEdit
KsPinGetConnectedPinInterface
KsPinGetNextSiblingPin
KsPinGetParentFilter
KsFilterGetChildPinCount

Sections

.rdata
Size: 256B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mswebdvd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

4d11507e5097e6d710ceb3f05f186072

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
WaitForSingleObject
TerminateProcess
lstrcpynA
GetModuleHandleA
GetUserDefaultLangID
IsValidLocale
GetCurrentThreadId
GetShortPathNameA
CloseHandle
lstrcpyA
MultiByteToWideChar
lstrlenA
InterlockedDecrement
GetLocaleInfoA
LoadLibraryA
GetProcAddress
FreeLibrary
InterlockedIncrement
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
DisableThreadLibraryCalls
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
lstrcatA
HeapDestroy
IsDBCSLeadByte
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
Sleep
GetVersionExA
GetSystemDirectoryA
SetEvent
ResetEvent
GetDriveTypeA
GetTickCount
FlushInstructionCache
WideCharToMultiByte
GetSystemTimeAsFileTime

msvcrt

_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_vsnprintf
fwrite
fclose
_ui64tow
malloc
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
wcslen
_ftol
__CxxFrameHandler
free
fopen
_purecall

gdi32

GetClipBox
GetDCOrgEx
CreateMetaFileA
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateDCA
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetTextColor
DeleteDC
RestoreDC
CreateSolidBrush
SelectObject
Rectangle
DeleteObject
GetNearestColor
GetDeviceCaps
GetSystemPaletteEntries
CreateRectRgnIndirect
SetBkColor
SetViewportOrgEx

user32

SetTimer
CharNextA
GetDC
PtInRect
UnionRect
GetKeyState
DestroyAcceleratorTable
SetWindowLongA
CallWindowProcA
EndPaint
BeginPaint
IsChild
GetFocus
RegisterClassExA
wsprintfA
GetClassInfoExA
SetFocus
ShowWindow
GetParent
SystemParametersInfoA
SetRect
GetSystemMetrics
IsIconic
GetWindowRect
InvalidateRgn
RegisterClassA
GetClassInfoA
PostMessageA
IsWindowVisible
GetWindowDC
ReleaseDC
KillTimer
DestroyCursor
DestroyWindow
LoadStringA
InvalidateRect
ShowCursor
GetWindow
CreateWindowExA
GetClientRect
IsWindow
GetDesktopWindow
MapWindowPoints
ClipCursor
LoadCursorA
IntersectRect
EqualRect
DrawTextA
SetCursor
DefWindowProcA
GetWindowLongA
SendMessageA
SetWindowPos
SetWindowRgn
OffsetRect

advapi32

RegDeleteKeyA
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptGetHashParam
RegCreateKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
ProgIDFromCLSID

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
VariantCopy
VariantInit
SetErrorInfo
CreateErrorInfo
OleTranslateColor
VariantChangeTypeEx
LoadRegTypeLi
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
VariantChangeType
SysStringByteLen
OleCreatePropertyFrame
SysAllocStringByteLen

comctl32

ord17

comdlg32

GetSaveFileNameA

shell32

SHGetSpecialFolderPathA

winmm

mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mciSendCommandA
mixerGetControlDetailsA
mixerGetNumDevs
mixerOpen
mixerClose

ddraw

DirectDrawCreate

quartz

AMGetErrorTextA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pid.dll
.dll windows:5 windows x86 arch:x86

c187922ee464a7248fc84c24ac38332b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
ResetEvent
WaitForMultipleObjects
MulDiv
ReleaseMutex
WaitForSingleObject
FreeLibrary
LoadLibraryA
CreateThread
CreateEventA
WriteFile
CreateFileA
Sleep
GetVersionExA
GetVersion
IsBadReadPtr
WriteFileEx
ReadFileEx
FreeLibraryAndExitThread
RtlUnwind
GetLastError
UnmapViewOfFile
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
InitializeCriticalSection
CreateMutexA
CreateFileMappingA
CloseHandle
MapViewOfFile
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
lstrcpyA
LocalReAlloc
LocalAlloc
GetModuleFileNameA
LocalFree

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA

user32

PeekMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
wsprintfA
MsgWaitForMultipleObjectsEx

hid

HidP_GetSpecificValueCaps
HidP_GetSpecificButtonCaps
HidP_SetUsageValueArray
HidP_GetUsages
HidP_SetUsageValue
HidP_GetCaps
HidD_GetPreparsedData
HidD_GetAttributes
HidD_FreePreparsedData
HidP_SetScaledUsageValue
HidD_SetFeature
HidP_GetScaledUsageValue
HidD_GetFeature
HidP_GetLinkCollectionNodes
HidP_SetUsages

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qasf.dll
.dll regsvr32 windows:5 windows x86 arch:x86

8f4c83c3afc22965cc8f4de6d7a2646e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDiskFreeSpaceA
TerminateProcess
GetSystemTimeAsFileTime
GlobalMemoryStatus
QueryPerformanceCounter
CreateThread
GetTickCount
GetLocalTime
GetComputerNameA
DeviceIoControl
GetModuleHandleW
LocalAlloc
LocalFree
GetCurrentProcessId
DisableThreadLibraryCalls
SetThreadPriority
InterlockedExchange
GetACP
WideCharToMultiByte
GetModuleHandleA
GetProcAddress
VirtualAlloc
CreateSemaphoreA
GetCurrentThreadId
GetCurrentProcess
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
GetVersionExA
RaiseException

msvcrt

wcslen
wcscpy
wcscat
_purecall
swprintf
_ftol
_except_handler3
??2@YAPAXI@Z
_wtoi
??3@YAXPAX@Z

gdi32

GetTextExtentPointA

user32

wsprintfA
wvsprintfA
GetDesktopWindow
GetWindowRect
LoadStringW
DefWindowProcA
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamA
SetWindowLongA
GetWindowLongA
GetDlgItem
GetDC
ReleaseDC
SendMessageA
LoadStringA

advapi32

RegCreateKeyExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
GetUserNameA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2

oleaut32

SysAllocStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qcap.dll
.dll regsvr32 windows:5 windows x86 arch:x86

3337a976f7a833f6793dfd25785c3a1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetCurrentProcess
GetProcAddress
GetDiskFreeSpaceA
ReadFile
GetFileSize
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
CreateIoCompletionPort
DeleteFileA
GetFullPathNameA
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateFileA
GetModuleHandleA
WriteFile
SetEndOfFile
lstrcmpA
IsBadCodePtr
IsBadHugeReadPtr
lstrcpynW
GetFileAttributesW
IsBadWritePtr
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiW
lstrcpyW
GetPrivateProfileStringW
IsBadReadPtr
GlobalMemoryStatus
GetProfileIntA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalUnlock
MulDiv
GetModuleFileNameA
lstrcpyA
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrlenA
WideCharToMultiByte
SetFilePointer
MultiByteToWideChar
VirtualAlloc
VirtualFree
GetSystemInfo
ReleaseSemaphore
InterlockedDecrement
FreeLibrary
InterlockedIncrement
CreateSemaphoreA
CreateThread
GetLastError
WaitForMultipleObjects
GetCurrentThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
ResetEvent
SetEvent
GetACP
CloseHandle
CreateEventA
GetVersionExA

msvcrt

_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
_except_handler3

gdi32

GetObjectA
GetPaletteEntries
GetStockObject
SelectObject
PatBlt
GetTextExtentPoint32A

user32

GetDlgItemInt
GetDesktopWindow
IsRectEmpty
SetDlgItemTextA
EnableWindow
GetDlgItem
SetDlgItemInt
ReleaseDC
ClientToScreen
GetClientRect
GetDC
IsWindowVisible
IsWindow
wsprintfW
SetCursor
LoadCursorA
GetAsyncKeyState
CheckRadioButton
CheckDlgButton
SendMessageA
wsprintfA
wvsprintfA
GetWindowRect
LoadStringW
DefWindowProcA
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamA
SetWindowLongA
GetWindowLongA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadStringA

advapi32

RegEnumKeyW
RegOpenKeyW
RegCreateKeyW
RegCreateKeyA
RegSetValueA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExW

ole32

CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemFree

oleaut32

SafeArrayAccessData
VariantClear
SysAllocString
SafeArrayUnaccessData
SysFreeString
SysStringLen

msvfw32

ICCompress
ICDecompress
ICGetInfo
ICOpen
ICClose
ICSendMessage
ICLocate

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

mixerOpen
mixerClose
waveInStop
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
mixerSetControlDetails
mixerGetID
mixerGetLineInfoA
mixerGetLineControlsA
waveInGetDevCapsA
waveInReset
waveInClose
waveInOpen
CloseDriver
OpenDriver
SendDriverMessage
mixerGetControlDetailsA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qdv.dll
.dll regsvr32 windows:5 windows x86 arch:x86

97b9a2e3ba597b131681d3171e64a371

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
_purecall
_ftol
_except_handler3
??3@YAXPAX@Z

user32

LoadStringW
GetDesktopWindow
GetWindowLongA
LoadStringA
IsRectEmpty
IsDlgButtonChecked
SendDlgItemMessageA
CheckRadioButton
wvsprintfA
wsprintfA
SetWindowLongA
CreateDialogParamA
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcA
GetWindowRect

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA

ole32

CoInitialize
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

msvfw32

StretchDIB

winmm

timeGetTime

kernel32

GetACP
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetVersionExA
DisableThreadLibraryCalls
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameA
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventA
SetEvent
ResetEvent
WaitForSingleObject
ReleaseSemaphore
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreA
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
InterlockedExchange
SetThreadPriority
GetTickCount
CreateThread
MulDiv
lstrcpyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qdvd.dll
.dll regsvr32 windows:5 windows x86 arch:x86

a260af3493591a91b9363a8954d4c9a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVolumeInformationA
SetWaitableTimer
CreateWaitableTimerA
SetFilePointer
ReadFile
FindCloseChangeNotification
GetLocaleInfoA
IsValidLocale
FindNextFileA
DeviceIoControl
GetOverlappedResult
TerminateProcess
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
FindFirstFileA
FindClose
GetDriveTypeA
GetFileAttributesA
GetUserDefaultLCID
GetComputerNameA
VirtualAlloc
VirtualFree
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
CreateThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
GetACP
IsBadReadPtr
IsBadWritePtr
HeapFree
SetLastError
GetVersionExA
WaitForMultipleObjects
ResetEvent
CreateEventA
lstrcmpA
SetEvent
Sleep
GetFullPathNameA
SetErrorMode
LoadLibraryA
MulDiv
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
CreateFileA
GetFileSize
CreateFileMappingA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThread
GetModuleFileNameA
lstrcatA
lstrcpyA
GlobalFree
HeapDestroy
WaitForSingleObject
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection

msvcrt

??3@YAXPAX@Z
realloc
??2@YAPAXI@Z
free
_purecall
_ftol
qsort
_except_handler3
malloc

gdi32

CreateCompatibleBitmap
GetDIBits
SetBkMode
ExtTextOutW
CreateFontIndirectA
GetTextMetricsA
EnumFontFamiliesExA
GetSystemPaletteEntries
SetBkColor
CreateRectRgnIndirect
CreateDCA
GetDeviceCaps
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
DeleteDC
SetViewportOrgEx
SetMapMode
LPtoDP
SetPixel
GetPixel
GetStockObject
GetObjectA
CreateDIBSection
DeleteObject
StretchBlt
BitBlt
SelectObject
StretchDIBits
SetDIBitsToDevice
GetRegionData
FillRgn
OffsetRgn
CreateSolidBrush
CombineRgn
GdiFlush
SetStretchBltMode
CreateCompatibleDC
CreateRectRgn
GetDCOrgEx
GetClipBox
SetTextColor

user32

SetDlgItemInt
SetDlgItemTextA
CheckRadioButton
EnableWindow
DrawTextA
IsIconic
GetWindowPlacement
GetQueueStatus
PostThreadMessageA
SetRectEmpty
RegisterWindowMessageA
PostMessageA
ScreenToClient
FillRect
SetRect
ClientToScreen
IsWindowVisible
IsRectEmpty
InvalidateRect
IsWindow
DestroyWindow
ShowWindow
SetFocus
LoadStringA
UnionRect
PtInRect
CheckDlgButton
CreateWindowExA
GetWindowLongA
CallWindowProcA
CharNextA
PeekMessageA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
EndPaint
GetClientRect
BeginPaint
ReleaseDC
GetDC
GetDlgItem
SendMessageA
MapWindowPoints
SystemParametersInfoA
GetWindowRect
GetParent
GetSystemMetrics
GetDlgItemInt
IsDlgButtonChecked
KillTimer
SetTimer
GetWindowThreadProcessId
UnregisterClassA
SendMessageTimeoutA
RegisterClassA
GetClassInfoA
wvsprintfA
GetDesktopWindow
LoadStringW
MoveWindow
DefWindowProcA
CreateDialogParamA
SetWindowLongA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA

advapi32

RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
GetUserNameA
RegOpenKeyA

ole32

CoCreateInstance
CreateOleAdviseHolder
WriteClassStm
OleLoadFromStream
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromCLSID
IIDFromString
CoUninitialize
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
OleSaveToStream

oleaut32

VarI4FromStr
SetErrorInfo
LoadRegTypeLi
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SysFreeString
GetActiveObject

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

winmm

timeKillEvent
timeSetEvent
timeGetTime
timeEndPeriod
timeBeginPeriod

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qedit.dll
.dll regsvr32 windows:5 windows x86 arch:x86

51e14b0e14b99f0d308a0f89a9c28b0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetSystemDirectoryA
GetFileTime
GetFileType
GetCurrentDirectoryA
TerminateProcess
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
MulDiv
LockResource
GetModuleHandleA
CreateFileA
GetFileSize
GetFullPathNameA
WriteFile
GlobalFree
CompareStringA
SetFilePointer
ReadFile
Sleep
lstrcatW
VirtualAlloc
VirtualFree
GetSystemInfo
ReleaseSemaphore
LoadLibraryA
CreateSemaphoreA
CreateThread
GetVersionExA
WaitForMultipleObjects
GetThreadPriority
SetThreadPriority
InterlockedExchange
ResetEvent
SetEvent
GetACP
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcpynA
CreateMutexA
DisableThreadLibraryCalls
CreateEventA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThread
ReleaseMutex
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
WaitForSingleObject
CloseHandle
GetLastError
GetCurrentThreadId
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection

msvcrt

??2@YAPAXI@Z
malloc
wcspbrk
wcstoul
wcsncmp
wcscat
srand
rand
_vsnwprintf
_splitpath
_wsplitpath
wcscmp
sprintf
_iob
fprintf
exit
fread
_setjmp3
fopen
fclose
longjmp
_purecall
free
_wtoi
realloc
??3@YAXPAX@Z
atof
_ftol
wcscpy
wcslen

gdi32

DeleteObject
CreateCompatibleDC
SetStretchBltMode
StretchBlt
CreateDIBSection
GetObjectA
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteDC
GetDeviceCaps

user32

LoadStringA
EndDialog
DefWindowProcA
wsprintfA
GetWindowTextLengthA
GetWindowTextA
SetWindowLongA
GetWindowRect
GetDesktopWindow
LoadStringW
GetWindowLongA
CharNextA
ShowWindow
DispatchMessageA
MsgWaitForMultipleObjects
SetWindowPos
ReleaseDC
GetDC
GetDlgItem
DestroyWindow
IsWindow
InvalidateRect
MoveWindow
WinHelpA
IsDialogMessageA
CreateDialogParamA
GetDialogBaseUnits
wvsprintfA
PostThreadMessageA
RegisterWindowMessageA
GetQueueStatus
MessageBoxA
GetDlgItemTextA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
IsDlgButtonChecked
IsRectEmpty
CharPrevA
PeekMessageA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
OleLoadFromStream
CreateStreamOnHGlobal
CreateBindCtx
StringFromGUID2
StringFromCLSID
CoUninitialize
CoInitialize
CoFreeUnusedLibraries
CLSIDFromString
StgCreateDocfile
CoCreateFreeThreadedMarshaler
StgOpenStorage

oleaut32

VariantChangeTypeEx
VarI4FromStr
LoadTypeLi
SetErrorInfo
LoadRegTypeLi
SysAllocString
VariantCopy
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
RegisterTypeLi

msvfw32

DrawDibOpen
DrawDibDraw
DrawDibClose

winmm

timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
timeKillEvent

comdlg32

GetOpenFileNameA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qedwipes.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 715KB - Virtual size: 714KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
quartz.dll
.dll regsvr32 windows:5 windows x86 arch:x86

362d13b1fcdff8b6b203ca20e4836ecd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetShortPathNameA
GetExitCodeProcess
GetFullPathNameA
WriteFile
QueryPerformanceFrequency
ReleaseMutex
CreateMutexA
HeapDestroy
FreeLibraryAndExitThread
Sleep
CreateFileA
lstrcpyA
lstrcatA
MulDiv
ReadFile
FormatMessageA
FormatMessageW
CreateThread
GetCurrentThread
GetThreadPriority
SetThreadPriority
InterlockedExchange
GetACP
WideCharToMultiByte
LoadLibraryA
FreeLibrary
GetLastError
lstrlenA
GetVersionExA
VirtualAlloc
CreateSemaphoreA
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
SetEvent
CreateEventA
CloseHandle
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MapViewOfFileEx
GetProfileIntA
GetProfileStringA
GetPrivateProfileStringA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
LocalAlloc
LocalFree
RaiseException
HeapAlloc
GetProcessHeap
HeapFree
WriteProfileStringA
GetDiskFreeSpaceA
CompareStringA
lstrcmpA
lstrcpynA
IsBadWritePtr
IsBadReadPtr
GetDriveTypeA
GetFileSize
SetErrorMode
LocalUnlock
LocalLock
LocalReAlloc
SetFilePointer
DeviceIoControl
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleFileNameA
MultiByteToWideChar
OpenProcess
lstrcmpiA

msvcrt

??3@YAXPAX@Z
_ftol
free
_initterm
??2@YAPAXI@Z
_adjust_fdiv
__dllonexit
_ltow
wcslen
towupper
memmove
atoi
getenv
sscanf
_except_handler3
sprintf
wcscpy
malloc
_onexit
_wtoi
_strdup

gdi32

GdiFlush
SetPixel
GetPixel
ExtTextOutA
SetBkColor
SelectPalette
FillRgn
CombineRgn
CreateRectRgnIndirect
CreatePalette
GetStockObject
GetTextExtentPoint32A
SetTextColor
SetBkMode
BitBlt
CreateDIBSection
EnumFontFamiliesExA
ExtTextOutW
SetTextCharacterExtra
StretchBlt
RealizePalette
GetObjectA
StretchDIBits
SetDIBColorTable
SetStretchBltMode
GetDeviceCaps
DeleteObject
GetDCOrgEx
EqualRgn
ExtCreateRegion
CreateRectRgn
CreateFontIndirectA
GetSystemPaletteEntries
GetDIBits
PatBlt
CreateSolidBrush
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
SetDIBitsToDevice
GetClipBox

user32

SendMessageA
GetWindowThreadProcessId
LoadStringA
SetTimer
KillTimer
IsWindow
InSendMessage
SetRect
GetDC
GetSystemMetrics
IsWindowVisible
IsRectEmpty
SendDlgItemMessageA
EndDialog
DialogBoxParamA
GetDlgItem
MessageBoxA
SystemParametersInfoA
GetDlgItemInt
EnableWindow
GetWindowRect
UnhookWindowsHookEx
InvalidateRect
SetWindowsHookExA
GetWindowPlacement
IsIconic
IntersectRect
OffsetRect
ClientToScreen
GetClientRect
SetRectEmpty
MapWindowPoints
ScreenToClient
GetParent
GetWindowLongA
GetDesktopWindow
EndPaint
BeginPaint
SetCursor
DestroyCursor
ReleaseDC
GetMessageA
TranslateMessage
DestroyWindow
PostMessageA
ReplyMessage
CharNextA
DispatchMessageA
GetQueueStatus
RegisterWindowMessageA
PostThreadMessageA
wvsprintfA
MsgWaitForMultipleObjects
PeekMessageA
wsprintfA
AdjustWindowRectEx
DefWindowProcA
CreateWindowExA
RegisterClassA
LoadCursorA
GetClassInfoA
LoadStringW
EqualRect
CreateDialogParamA
SetDlgItemTextA
SetParent
IsZoomed
SetWindowLongA
FillRect
ChangeDisplaySettingsExA
GetWindowTextA
SetWindowTextA
MoveWindow
SetForegroundWindow
ShowWindow
GetForegroundWindow
SetWindowPos
UpdateWindow
GetKeyboardState
SetKeyboardState
LoadImageA

advapi32

RegFlushKey
RegCreateKeyExA
RegQueryInfoKeyA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegQueryValueA

ole32

CLSIDFromString
CreateBindCtx
CoCreateFreeThreadedMarshaler
MkParseDisplayName
CreateStreamOnHGlobal
StgOpenStorage
StgIsStorageFile
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance

oleaut32

LoadRegTypeLi
VariantChangeType
VariantCopy
VariantInit
SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserUnmarshal
VARIANT_UserFree
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
SysReAllocString
SetErrorInfo

winmm

waveOutGetVolume
waveOutSetVolume
waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutGetErrorTextA
waveOutGetDevCapsA
waveOutClose
waveOutGetNumDevs
midiOutReset
midiStreamOpen
midiStreamProperty
midiOutGetNumDevs
mixerGetNumDevs
mixerGetLineInfoA
mixerGetDevCapsA
mixerGetLineControlsA
mixerSetControlDetails
mixerGetControlDetailsA
midiStreamOut
midiOutUnprepareHeader
midiStreamRestart
midiOutPrepareHeader
midiStreamPause
midiStreamPosition
midiOutGetErrorTextA
midiStreamClose
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeGetTime

rpcrt4

NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubCall2
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleAllocate
NdrClientCall2
NdrOleFree

Exports

Exports

AMGetErrorTextA
AMGetErrorTextW
AmpFactorToDB
DBToAmpFactor
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 902KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
quartz.vxd
stream.sys
.dll windows:5 windows x86 arch:x86

c1134fdb9e503ad5d0b7e607ebcafde9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

stream.pdb

Imports

ntoskrnl.exe

MmMapLockedPages
KefAcquireSpinLockAtDpcLevel
IoFreeMdl
ExAllocatePoolWithTag
IoAllocateMdl
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeSetEvent
InterlockedDecrement
IoFreeIrp
IofCompleteRequest
IoCancelIrp
ZwQueryValueKey
RtlInitUnicodeString
KeWaitForSingleObject
ExFreePool
IoBuildSynchronousFsdRequest
KeInitializeEvent
MmResetDriverPaging
KeSetTimer
KeCancelTimer
ExQueueWorkItem
PoRequestPowerIrp
InterlockedIncrement
PoCallDriver
MmMapIoSpace
ZwClose
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
IoOpenDeviceRegistryKey
IoAllocateIrp
MmBuildMdlForNonPagedPool
InterlockedExchange
IofCallDriver
MmPageEntireDriver
IoGetDriverObjectExtension
IoBuildDeviceIoControlRequest
KeResetEvent
PoStartNextPowerIrp
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
IoStopTimer
MmUnmapIoSpace
IoDisconnectInterrupt
wcscpy
wcslen
IoCreateDevice
ObfReferenceObject
ZwEnumerateKey
ZwOpenKey
_snwprintf
swprintf
IoGetDeviceProperty
RtlIntegerToUnicodeString
IoStartTimer
IoConnectInterrupt
KeSynchronizeExecution
IoGetDmaAdapter
KeInitializeTimer
KeInitializeDpc
KeInitializeSpinLock
IoDetachDevice
IoDeleteDevice
IoInitializeTimer
IoAttachDeviceToDeviceStack
IoAllocateDriverObjectExtension
DbgBreakPoint
IoGetDeviceInterfaces
KeDelayExecutionThread
ObfDereferenceObject
ProbeForRead
KeInsertQueueDpc
IoReleaseCancelSpinLock
memmove
ObReferenceObjectByHandle
IoFileObjectType
ExGetPreviousMode
IoGetRelatedDeviceObject
KeTickCount
KeBugCheckEx
KefReleaseSpinLockFromDpcLevel
RtlUnwind

hal

KfLowerIrql
KeQueryPerformanceCounter
KfRaiseIrql
KfAcquireSpinLock
KfReleaseSpinLock

ks.sys

KsUnserializeObjectPropertiesFromRegistry
KsDiscardEvent
KsAllocateExtraData
KsProbeStreamIrp
KsFreeObjectHeader
KsAllocateObjectHeader
KsUnregisterWorker
KsRegisterWorker
KsDispatchIrp
KsAddIrpToCancelableQueue
KsRemoveIrpFromCancelableQueue
KsFreeDeviceHeader
KsAllocateDeviceHeader
KsNullDriverUnload
KsGenerateEventList
KsGenerateEvent
KsCacheMedium
KsDispatchFastReadFailure
KsDispatchFastIoDeviceControlFailure
KsDispatchInvalidDeviceRequest
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsMethodHandler
KsPinPropertyHandler
KsCreateDefaultAllocator
KsSynchronousIoControlDevice
KsTopologyPropertyHandler
KsStreamIo
KsQueueWorkItem
KsSetTargetDeviceObject
KsFreeEventList
KsValidateClockCreateRequest
KsValidateConnectRequest
KsPinDataIntersection

Exports

Exports

DllInitialize
DllUnload
StreamClassAbortOutstandingRequests
StreamClassCallAtNewPriority
StreamClassCompleteRequestAndMarkQueueReady
StreamClassDebugAssert
StreamClassDebugPrint
StreamClassDeviceNotification
StreamClassFilterReenumerateStreams
StreamClassGetDmaBuffer
StreamClassGetNextEvent
StreamClassGetPhysicalAddress
StreamClassLogError
StreamClassPnPAddDeviceWorker
StreamClassQueryMasterClock
StreamClassQueryMasterClockSync
StreamClassReadWriteConfig
StreamClassReenumerateStreams
StreamClassRegisterAdapter
StreamClassRegisterFilterWithNoKSPins
StreamClassScheduleTimer
StreamClassStreamNotification

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 896B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
stream98.sys
.dll windows:5 windows x86 arch:x86

c1134fdb9e503ad5d0b7e607ebcafde9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

stream.pdb

Imports

ntoskrnl.exe

MmMapLockedPages
KefAcquireSpinLockAtDpcLevel
IoFreeMdl
ExAllocatePoolWithTag
IoAllocateMdl
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeSetEvent
InterlockedDecrement
IoFreeIrp
IofCompleteRequest
IoCancelIrp
ZwQueryValueKey
RtlInitUnicodeString
KeWaitForSingleObject
ExFreePool
IoBuildSynchronousFsdRequest
KeInitializeEvent
MmResetDriverPaging
KeSetTimer
KeCancelTimer
ExQueueWorkItem
PoRequestPowerIrp
InterlockedIncrement
PoCallDriver
MmMapIoSpace
ZwClose
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
IoOpenDeviceRegistryKey
IoAllocateIrp
MmBuildMdlForNonPagedPool
InterlockedExchange
IofCallDriver
MmPageEntireDriver
IoGetDriverObjectExtension
IoBuildDeviceIoControlRequest
KeResetEvent
PoStartNextPowerIrp
ZwSetValueKey
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
IoStopTimer
MmUnmapIoSpace
IoDisconnectInterrupt
wcscpy
wcslen
IoCreateDevice
ObfReferenceObject
ZwEnumerateKey
ZwOpenKey
_snwprintf
swprintf
IoGetDeviceProperty
RtlIntegerToUnicodeString
IoStartTimer
IoConnectInterrupt
KeSynchronizeExecution
IoGetDmaAdapter
KeInitializeTimer
KeInitializeDpc
KeInitializeSpinLock
IoDetachDevice
IoDeleteDevice
IoInitializeTimer
IoAttachDeviceToDeviceStack
IoAllocateDriverObjectExtension
DbgBreakPoint
IoGetDeviceInterfaces
KeDelayExecutionThread
ObfDereferenceObject
ProbeForRead
KeInsertQueueDpc
IoReleaseCancelSpinLock
memmove
ObReferenceObjectByHandle
IoFileObjectType
ExGetPreviousMode
IoGetRelatedDeviceObject
KeTickCount
KeBugCheckEx
KefReleaseSpinLockFromDpcLevel
RtlUnwind

hal

KfLowerIrql
KeQueryPerformanceCounter
KfRaiseIrql
KfAcquireSpinLock
KfReleaseSpinLock

ks.sys

KsUnserializeObjectPropertiesFromRegistry
KsDiscardEvent
KsAllocateExtraData
KsProbeStreamIrp
KsFreeObjectHeader
KsAllocateObjectHeader
KsUnregisterWorker
KsRegisterWorker
KsDispatchIrp
KsAddIrpToCancelableQueue
KsRemoveIrpFromCancelableQueue
KsFreeDeviceHeader
KsAllocateDeviceHeader
KsNullDriverUnload
KsGenerateEventList
KsGenerateEvent
KsCacheMedium
KsDispatchFastReadFailure
KsDispatchFastIoDeviceControlFailure
KsDispatchInvalidDeviceRequest
KsPropertyHandler
KsEnableEvent
KsDisableEvent
KsMethodHandler
KsPinPropertyHandler
KsCreateDefaultAllocator
KsSynchronousIoControlDevice
KsTopologyPropertyHandler
KsStreamIo
KsQueueWorkItem
KsSetTargetDeviceObject
KsFreeEventList
KsValidateClockCreateRequest
KsValidateConnectRequest
KsPinDataIntersection

Exports

Exports

DllInitialize
DllUnload
StreamClassAbortOutstandingRequests
StreamClassCallAtNewPriority
StreamClassCompleteRequestAndMarkQueueReady
StreamClassDebugAssert
StreamClassDebugPrint
StreamClassDeviceNotification
StreamClassFilterReenumerateStreams
StreamClassGetDmaBuffer
StreamClassGetNextEvent
StreamClassGetPhysicalAddress
StreamClassLogError
StreamClassPnPAddDeviceWorker
StreamClassQueryMasterClock
StreamClassQueryMasterClockSync
StreamClassReadWriteConfig
StreamClassReenumerateStreams
StreamClassRegisterAdapter
StreamClassRegisterFilterWithNoKSPins
StreamClassScheduleTimer
StreamClassStreamNotification

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 896B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swenum.sys
.sys windows:5 windows x86 arch:x86

2b29cc5a8e62f78b659fb1c44e574507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

swenum.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeTickCount

ks.sys

KsCreateBusEnumObject
KsGetBusEnumPnpDeviceObject
KsServiceBusEnumPnpRequest
KsIsBusEnumChildDevice
KsServiceBusEnumCreateRequest
KsInstallBusEnumInterface
KsRemoveBusEnumInterface
KsGetBusEnumIdentifier

Sections

.text
Size: 384B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swenum98.sys
.sys windows:5 windows x86 arch:x86

09fe4b4792d84920852bac7bb5c7981f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

swenum.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
ExAllocatePoolWithTag
KeTickCount

ks.sys

KsCreateBusEnumObject
KsGetBusEnumPnpDeviceObject
KsServiceBusEnumPnpRequest
KsIsBusEnumChildDevice
KsServiceBusEnumCreateRequest
KsInstallBusEnumInterface
KsRemoveBusEnumInterface
KsGetBusEnumIdentifier

Sections

.text
Size: 384B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swenumse.sys
.sys windows:5 windows x86 arch:x86

2b29cc5a8e62f78b659fb1c44e574507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

swenum.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeTickCount

ks.sys

KsCreateBusEnumObject
KsGetBusEnumPnpDeviceObject
KsServiceBusEnumPnpRequest
KsIsBusEnumChildDevice
KsServiceBusEnumCreateRequest
KsInstallBusEnumInterface
KsRemoveBusEnumInterface
KsGetBusEnumIdentifier

Sections

.text
Size: 384B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 640B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vidx16.dll
vjoyd.vxd
DirectX/Jun2005_MDX_x86.cab
.cab
jun2005_mdx_x86.inf
microsoft.directx.audiovideoplayback.dll
.dll windows:5 windows x86 arch:x86

c1f83ebb18f3fb1f64e049cc66ecf65d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.AudioVideoPlayback.pdb

Imports

kernel32

DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
GetModuleHandleA
SetLastError
InterlockedDecrement

mscoree

_CorDllMain

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp

user32

SetForegroundWindow
DestroyWindow
DefWindowProcW
CreateWindowExW
RegisterClassExW
SetFocus

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.audiovideoplayback.xml
microsoft.directx.diagnostics.dll
.dll windows:5 windows x86 arch:x86

38277bebdd264ed07095bae2dab4d586

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.Diagnostics.pdb

Imports

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls

mscoree

_CorDllMain

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantInit
VariantClear

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.diagnostics.xml
microsoft.directx.direct3d.dll
.dll windows:5 windows x86 arch:x86

cc3ca07defb48d2a38605fc9ea19b7ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.Direct3D.pdb

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
SetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls

mscoree

_CorDllMain

msvcrt

memcmp
??3@YAXPAX@Z
??2@YAPAXI@Z

user32

GetIconInfo
GetDC
ReleaseDC

gdi32

GetDIBits
DeleteDC
CreateCompatibleDC
GetObjectA
DeleteObject
SelectObject

d3d9

Direct3DCreate9

Sections

.text
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.direct3d.xml
microsoft.directx.direct3dx.dll
.dll windows:5 windows x86 arch:x86

14650963c481b34a8a767809f4a5ceb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.Direct3DX.pdb

Imports

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
memcmp
realloc
calloc
malloc
_onexit
__dllonexit
_adjust_fdiv
_initterm
free

kernel32

InterlockedExchange
GetCurrentThreadId
SetLastError
GetTempFileNameA
Sleep
DisableThreadLibraryCalls
GetTempPathA
InterlockedDecrement
InterlockedIncrement

mscoree

_CorDllMain

user32

GetDC
ReleaseDC

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
GetDeviceCaps

d3dx9_26

D3DXSavePRTBufferToFileW
D3DXLoadPRTCompBufferFromFileW
D3DXSavePRTCompBufferToFileW
D3DXCreateTextureGutterHelper
D3DXCreatePRTEngine
D3DXConcatenateMeshes
D3DXSHPRTCompSuperCluster
D3DXFileCreate
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeIMTFromPerTexelSignal
D3DXCreatePRTCompBuffer
D3DXSaveTextureToFileInMemory
D3DXFresnelTerm
D3DXGetFVFVertexSize
D3DXColorAdjustSaturation
D3DXColorAdjustContrast
D3DXDisassembleEffect
D3DXGetShaderConstantTable
D3DXCreateEffectPool
D3DXCreateBuffer
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompiler
D3DXCreateEffectFromFileW
D3DXCreateEffectFromFileExW
D3DXCreateEffect
D3DXCreateEffectEx
D3DXCreateFontW
D3DXCreateFontIndirectW
D3DXAssembleShaderFromFileA
D3DXAssembleShader
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXGetShaderVersion
D3DXGetShaderSize
D3DXDisassembleShader
D3DXGetShaderSamplers
D3DXGetShaderOutputSemantics
D3DXGetShaderInputSemantics
D3DXComputeTangentFrameEx
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXComputeBoundingSphere
D3DXComputeBoundingBox
D3DXGetDeclVertexSize
D3DXDeclaratorFromFVF
D3DXFVFFromDeclarator
D3DXGenerateOutputDecl
D3DXIntersectTri
D3DXSphereBoundProbe
D3DXBoxBoundProbe
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromFileInMemory
D3DXGetPixelShaderProfile
D3DXGetVertexShaderProfile
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromSurface
D3DXSaveSurfaceToFileW
D3DXSaveSurfaceToFileInMemory
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromVolume
D3DXSaveVolumeToFileW
D3DXCheckTextureRequirements
D3DXCheckCubeTextureRequirements
D3DXCheckVolumeTextureRequirements
D3DXCreateTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateTextureFromFileW
D3DXCreateCubeTextureFromFileW
D3DXCreateVolumeTextureFromFileW
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileExW
D3DXSaveTextureToFileW
D3DXFilterTexture
D3DXFillTexture
D3DXFillCubeTexture
D3DXFillVolumeTexture
D3DXFillTextureTX
D3DXFillCubeTextureTX
D3DXFillVolumeTextureTX
D3DXComputeNormalMap
D3DXGetDriverLevel
D3DXLoadSkinMeshFromXof
D3DXComputeNormals
D3DXWeldVertices
D3DXIntersect
D3DXIntersectSubset
D3DXComputeTangent
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXSaveMeshToXA
D3DXValidMesh
D3DXSaveMeshHierarchyToFileW
D3DXComputeTangentFrame
D3DXUVAtlasPack
D3DXLoadMeshHierarchyFromXW
D3DXLoadMeshHierarchyFromXInMemory
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXA
D3DXLoadMeshFromXof
D3DXTessellateNPatches
D3DXSplitMesh
D3DXCreateTextW
D3DXCreatePolygon
D3DXCreateBox
D3DXCreateCylinder
D3DXCreateSphere
D3DXCreateTorus
D3DXCreateTeapot
D3DXCleanMesh
D3DXSimplifyMesh
D3DXUVAtlasCreate
D3DXUVAtlasPartition
D3DXGeneratePMesh
D3DXCreateSPMesh
D3DXValidPatchMesh
D3DXCreatePatchMesh
D3DXLoadPatchMeshFromXof
D3DXCreateNPatchMesh
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXMatrixMultiply
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXCreateSprite
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateLine
D3DXCreateFragmentLinker
D3DXGatherFragmentsFromFileW
D3DXGatherFragments
D3DXCreateKeyframedAnimationSet
D3DXCreateCompressedAnimationSet
D3DXCreateAnimationController
D3DXFrameDestroy
D3DXFrameAppendChild
D3DXFrameRegisterNamedMatrices
D3DXFrameNumNamedMatrices
D3DXFrameCalculateBoundingSphere
D3DXFrameFind
D3DXCreateTextureShader
D3DXSHEvalDirection
D3DXSHRotate
D3DXSHRotateZ
D3DXSHAdd
D3DXSHScale
D3DXSHDot
D3DXSHEvalDirectionalLight
D3DXSHEvalSphericalLight
D3DXSHEvalConeLight
D3DXSHEvalHemisphereLight
D3DXSHProjectCubeMap
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXLoadPRTBufferFromFileW

Sections

.text
Size: 553KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.direct3dx.xml
microsoft.directx.directdraw.dll
.dll windows:5 windows x86 arch:x86

1ba96afd00c76c9bf85df17529e98e39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.DirectDraw.pdb

Imports

kernel32

SetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
ReadFile
CloseHandle
DisableThreadLibraryCalls

mscoree

_CorDllMain

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
memcmp

user32

LoadImageA

gdi32

CreateBrushIndirect
CreateSolidBrush
CreateHatchBrush
CreatePen
SetTextColor
GetTextAlign
SetTextAlign
ExtTextOutW
Polyline
Ellipse
RoundRect
SetBkMode
SetBkColor
Rectangle
DeleteDC
StretchBlt
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectA

ddraw

DirectDrawEnumerateExA
DirectDrawCreateEx
DirectDrawCreateClipper

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.directdraw.xml
microsoft.directx.directinput.dll
.dll windows:5 windows x86 arch:x86

0407f964c24f1756aa6b15cfcf3a3024

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.DirectInput.pdb

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
IsBadWritePtr
IsBadReadPtr
lstrlenA
SetLastError
DisableThreadLibraryCalls

mscoree

_CorDllMain

msvcrt

strncpy
??2@YAPAXI@Z
??3@YAXPAX@Z

dinput8

DirectInput8Create

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.directinput.xml
microsoft.directx.directplay.dll
.dll windows:5 windows x86 arch:x86

9a1c810039e535600a16be2ad3c8649e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.DirectPlay.pdb

Imports

kernel32

DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLastError

mscoree

_CorDllMain

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

Sections

.text
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.directplay.xml
microsoft.directx.directsound.dll
.dll windows:5 windows x86 arch:x86

00214b053aa5cf80d5f0b263184e853d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.DirectSound.pdb

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetTickCount
QueryPerformanceCounter
SetLastError
DisableThreadLibraryCalls

mscoree

_CorDllMain

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z

msacm32

acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmStreamUnprepareHeader
acmStreamClose

dsound

ord10
ord3
ord8
ord12
ord11

winmm

mmioAscend
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioSeek
mmioClose
mmioOpenA
mmioRead
mmioDescend

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.directsound.xml
microsoft.directx.dll
.dll windows:5 windows x86 arch:x86

272e9f998b44bd5348f4d46d5b74bed2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.DirectX.pdb

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
SetLastError
GetCurrentProcessId
OutputDebugStringA
IsProcessorFeaturePresent
DisableThreadLibraryCalls

mscoree

_CorDllMain

msvcrt

_ftol
??2@YAPAXI@Z
_finite
__CxxFrameHandler
_CIacos
memcmp
??3@YAXPAX@Z

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft.directx.xml
DirectX/Jun2005_d3dx9_26_x64.cab
.cab
d3dx9_26.dll
.dll windows:5 windows x64 arch:x64

2454eeb91e719344a3272ad3b07f1f6b

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

23/05/2002, 08:00

Not After

25/09/2011, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:87:58:00:03:00:00:00:5a
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/01/2005, 23:20

Not After

05/04/2006, 23:30

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ab:e4:c8:d6:f2:74:2c:26:5f:52:30:98:b5:28:8e:bd:65:70:11:17
Signer

Actual PE Digest

ab:e4:c8:d6:f2:74:2c:26:5f:52:30:98:b5:28:8e:bd:65:70:11:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_26.pdb

Imports

msvcrt

__C_specific_handler
?terminate@@YAXXZ
_initterm
srand
fmodf
_tempnam
exit
atol
_ultoa
wcstombs
rand
ceilf
__CxxFrameHandler
isxdigit
atof
tanh
tan
sinh
exp
cosh
_fpclass
strchr
_isnan
atan2
acos
asin
cos
sin
log
floor
isalnum
isalpha
toupper
tolower
atoi
floorf
_strtime
_strdate
sscanf
pow
isspace
isdigit
_setjmp
longjmp
ldexp
frexp
memcmp
calloc
realloc
malloc
logf
setlocale
_strdup
free
ceil
_vsnprintf
atan
asinf
atan2f
acosf
_finite
cosf
sinf
sqrt
memmove
qsort
fmod
_purecall
_stricmp
modff
??2@YAPEAX_K@Z
memcpy
powf
memset
iswspace
iswalpha
iswdigit
iswpunct
sqrtf
??3@YAXPEAX@Z

gdi32

CreateFontIndirectW
SetBkMode
GetTextMetricsW
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
GetFontLanguageInfo
CreateFontIndirectA
SetTextColor
SetBkColor
DeleteObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
ExtTextOutW
TranslateCharsetInfo
GetCurrentObject
GetOutlineTextMetricsA
GetGlyphOutlineW
SetTextAlign

kernel32

MoveFileA
DeleteFileW
SetFilePointer
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
CompareStringA
CreateFileW
GetFullPathNameA
LeaveCriticalSection
DeleteCriticalSection
Sleep
MoveFileW
EnterCriticalSection
lstrcmpiA
IsDBCSLeadByte
WriteFile
GetTempPathA
GetTempFileNameA
CreateFileA
ReadFile
CloseHandle
DeleteFileA
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
GetACP
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetVersionExA
DisableThreadLibraryCalls
GetTempFileNameW
GlobalMemoryStatus
FreeLibrary
SetEndOfFile
GetSystemInfo
ExpandEnvironmentStringsA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetLastError
CreateMutexA
WaitForSingleObject
ReleaseMutex
HeapAlloc
GetProcessHeap
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FindResourceW
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSection

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCpuOptimizations
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetTargetDescByName
D3DXGetTargetDescByVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx9_26_x64.cat
d3dx9_26_x64.inf
infinst.exe
.exe windows:5 windows x64 arch:x64

a4d7b2a6d90bced2fa8b4aa5a0bb5ea7

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

23/05/2002, 08:00

Not After

25/09/2011, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:87:58:00:03:00:00:00:5a
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/01/2005, 23:20

Not After

05/04/2006, 23:30

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

da:50:5f:cf:ae:93:7e:85:4d:bc:13:52:e2:5d:2e:29:85:fc:59:8c
Signer

Actual PE Digest

da:50:5f:cf:ae:93:7e:85:4d:bc:13:52:e2:5d:2e:29:85:fc:59:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

infinst.pdb

Imports

kernel32

OutputDebugStringA
GetWindowsDirectoryA
CompareStringA
GetLastError
CloseHandle
CreateFileA
FindClose
FindFirstFileA
MoveFileExA
CopyFileA
GetCurrentDirectoryA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery

user32

CharNextA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupOpenFileQueue
SetupInstallFromInfSectionA
SetupCloseFileQueue
SetupCloseInfFile
SetupCopyOEMInfA

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jun2005_d3dx9_26_x64.inf
DirectX/Jun2005_d3dx9_26_x86.cab
.cab
d3dx9_26.dll
.dll windows:5 windows x86 arch:x86

2abb11713d27f28274d0403d953d7c02

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

23/05/2002, 08:00

Not After

25/09/2011, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:87:58:00:03:00:00:00:5a
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/01/2005, 23:20

Not After

05/04/2006, 23:30

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c2:de:d7:d3:9d:82:c8:39:e3:31:10:d6:66:26:d7:5b:3e:e4:83:3e
Signer

Actual PE Digest

c2:de:d7:d3:9d:82:c8:39:e3:31:10:d6:66:26:d7:5b:3e:e4:83:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3dx9_26.pdb

Imports

msvcrt

_except_handler3
?terminate@@YAXXZ
_adjust_fdiv
_initterm
srand
_tempnam
exit
atol
_ultoa
wcstombs
rand
isxdigit
atof
_CIcosh
_CIexp
_CIsinh
_CItanh
_fpclass
strchr
_isnan
isalnum
isalpha
toupper
tolower
atoi
floor
_strtime
_strdate
sscanf
isspace
isdigit
_setjmp3
longjmp
ldexp
frexp
wcslen
calloc
realloc
malloc
_CIsqrt
setlocale
_strdup
free
ceil
_controlfp
_vsnprintf
_CIasin
__CxxFrameHandler
_finite
_CIacos
memmove
qsort
_CIfmod
_purecall
_stricmp
modf
iswspace
iswalpha
iswdigit
iswpunct
_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z

gdi32

TranslateCharsetInfo
ExtTextOutW
GetCurrentObject
ExtTextOutA
SetMapMode
SetTextAlign
GetOutlineTextMetricsA
GetGlyphOutlineW
MoveToEx
CreateCompatibleDC
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA

kernel32

SetFilePointer
DeleteFileW
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
CompareStringA
CreateFileW
GetFullPathNameA
LeaveCriticalSection
MoveFileA
InterlockedCompareExchange
Sleep
InitializeCriticalSection
InterlockedExchange
EnterCriticalSection
lstrcmpiA
IsDBCSLeadByte
WriteFile
GetTempPathA
GetTempFileNameA
CreateFileA
ReadFile
CloseHandle
DeleteFileA
InterlockedDecrement
InterlockedIncrement
IsProcessorFeaturePresent
GetSystemInfo
MoveFileW
GetTempFileNameW
GlobalMemoryStatus
FreeLibrary
SetEndOfFile
ExpandEnvironmentStringsA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetLastError
CreateMutexA
WaitForSingleObject
ReleaseMutex
HeapAlloc
GetProcessHeap
HeapFree
QueryPerformanceCounter
GetTickCount
FindResourceW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
DisableThreadLibraryCalls
GetVersionExA
LoadLibraryA
GetProcAddress
GetModuleHandleA
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
GetACP
VirtualFree
VirtualAlloc

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCpuOptimizations
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetTargetDescByName
D3DXGetTargetDescByVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx9_26_w9x.inf
d3dx9_26_x86.cat
d3dx9_26_x86.inf
jun2005_d3dx9_26_x86.inf
DirectX/dsetup32.dll
.dll windows:5 windows x86 arch:x86

4a37303fc2dda48c99c13d7801392f1b

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

23/05/2002, 08:00

Not After

25/09/2011, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:87:58:00:03:00:00:00:5a
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/01/2005, 23:20

Not After

05/04/2006, 23:30

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6f:a9:77:63:21:2a:1b:a0:87:2a:8b:83:0a:64:65:ac:af:ed:c6:2f
Signer

Actual PE Digest

6f:a9:77:63:21:2a:1b:a0:87:2a:8b:83:0a:64:65:ac:af:ed:c6:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dsetup32.pdb

Imports

kernel32

GetSystemDefaultLCID
lstrlenA
GetShortPathNameA
GetModuleFileNameA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryExA
DeleteFileA
GetFileAttributesA
FindClose
FindFirstFileA
GetPrivateProfileSectionA
SetFileAttributesA
FindNextFileA
lstrcmpA
GetSystemDirectoryA
GetPrivateProfileSectionNamesA
WideCharToMultiByte
GetDiskFreeSpaceA
GetModuleHandleA
CopyFileA
ReadFile
GetFileSize
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetPrivateProfileStringA
CreateDirectoryA
GetSystemInfo
MultiByteToWideChar
MoveFileExA
SetFileTime
GetFileTime
GetTempFileNameA
GetDriveTypeA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetTempPathA
Sleep
CreateMutexA
LoadResource
FindResourceA
LockResource
SizeofResource
SetLastError
lstrcmpiA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileA
HeapFree
HeapAlloc
GetProcessHeap
GetLocalTime
HeapReAlloc
ExitProcess
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualProtect
VirtualQuery
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetFilePointer
SetStdHandle
FlushFileBuffers
RtlUnwind
InterlockedExchange
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetCurrentProcess
CloseHandle
GetLastError
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringA
GetWindowsDirectoryA
GetCommandLineA
OutputDebugStringA

gdi32

GetDeviceCaps

user32

CreateDialogParamA
SetFocus
DestroyWindow
DialogBoxParamA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
GetDesktopWindow
SendDlgItemMessageA
MessageBoxA
ShowWindow
SetDlgItemTextA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
GetKeyboardType
CharNextA
GetDlgItem
CharLowerA
EndDialog
SendMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA

shlwapi

SHDeleteKeyA

winmm

mmioDescend
mmioOpenA
mmioRead
mmioClose

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shell32

SHFileOperationA

ole32

StringFromGUID2

Exports

Exports

DirectXLoadString
DirectXSetupCallback
DirectXSetupSetCallback
DirectXSetupShowEULA
iDirectXSetup
iDirectXSetupGetEULA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DirectX/dxnt.cab
.cab
DirectX/dxupdate.cab
.cab
StarshineEpisode1.ico
data1.cab
data1.hdr
data2.cab
engine32.cab
.cab
layout.bin
setup.boot
setup.exe
.exe windows:4 windows x86 arch:x86

5523dda9a438aa3992e03f3746f19bf6

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

01
Certificate

Issuer

CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c177365727665722d6365727473407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c177365727665722d6365727473407468617774652e636f6d

08:d1:35
Certificate

Issuer

CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c177365727665722d6365727473407468617774652e636f6d

Not Before

12/02/2002, 00:05

Not After

12/02/2003, 00:05

Subject

CN=InstallShield Software Corporation,OU=Research and Development,O=InstallShield Software Corporation,L=Schaumburg,ST=Illinois,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetLastError
SetLastError
lstrcmpiA
lstrlenA
CompareStringW
GetVersionExA
DeleteFileA
CompareStringA
GetWindowsDirectoryA
GetTempPathA
GetFileAttributesA
GetTempFileNameA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetTickCount
LockResource
LoadResource
FindResourceA
lstrcpyA
SetErrorMode
FreeLibrary
RemoveDirectoryA
LeaveCriticalSection
EnterCriticalSection
CreateThread
CreateMutexA
WaitForSingleObject
ReleaseMutex
InitializeCriticalSection
DeleteCriticalSection
SetEvent
OpenEventA
GetModuleHandleA
GetCurrentThreadId
HeapAlloc
GetSystemInfo
HeapCreate
lstrcpynA
lstrcatA
GetPrivateProfileIntA
lstrlenW
FindFirstFileA
SetFilePointer
GetProcAddress
LoadLibraryA
GetShortPathNameA
GetSystemDefaultLangID
MoveFileA
FindResourceExA
GetFileSize
HeapDestroy
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SizeofResource
GetStartupInfoA
ExitProcess
GetCommandLineA
DebugBreak
HeapReAlloc
HeapFree
VirtualQuery
VirtualProtect
SearchPathA
ResetEvent
QueryPerformanceCounter
SystemTimeToFileTime
lstrcmpA
MultiByteToWideChar
GetCurrentThread
GetVersion
IsBadReadPtr
ReadFile
Sleep
WriteFile
CloseHandle
CreateEventA
QueryPerformanceFrequency
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetModuleFileNameA
CreateDirectoryA
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileStringA
FindClose
CreateProcessA
GetCurrentProcess

user32

MsgWaitForMultipleObjects
LoadStringA
CharNextA
PeekMessageA
PostThreadMessageA
CharUpperA
SetTimer
SetWindowRgn
DialogBoxIndirectParamA
SetActiveWindow
CharLowerBuffA
CreateDialogIndirectParamA
GetDlgItem
SendMessageA
SetDlgItemTextA
LoadIconA
GetWindowRect
SystemParametersInfoA
SetWindowPos
CharLowerA
GetWindowTextA
GetDesktopWindow
ScreenToClient
MoveWindow
KillTimer
DestroyWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
SetWindowTextA
ShowWindow
EndDialog
wsprintfA

gdi32

CreateFontIndirectA
LPtoDP
GetTextExtentPoint32A
DeleteObject
GetObjectA

advapi32

RegCreateKeyExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegCloseKey
RegOpenKeyExA
RegSetValueExA
AllocateAndInitializeSid
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueA
FreeSid
EqualSid

ole32

CoTaskMemFree
StringFromGUID2
GetRunningObjectTable
CoCreateInstance
CoCreateGuid
CoReleaseMarshalData
CoInitialize
CoGetInterfaceAndReleaseStream
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
StringFromCLSID
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen
VariantCopy
VariantClear
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysAllocString

lz32

LZClose
LZCopy
LZOpenFileA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
setup.ini
setup.inx
Starshine_Legacy_1_Mystery_of_the_Soulriders_Win_ISO_EN/OldGamesDownload.url
.url
Starshine_Legacy_1_Mystery_of_the_Soulriders_Win_ISO_EN/ReadMe.txt

Sharing

General

Malware Config

Signatures

Files

bd61e5a03c0af93c60b30cf39184a4a7

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 43KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

4cab68af3a9d463423ff5188da351b39

Headers

File Characteristics

Imports

kernel32

ntdll

ole32

oleaut32

user32

advapi32

rpcrt4

Exports

Exports

Sections

.text Size: 241KB - Virtual size: 240KB

.orpc Size: 512B - Virtual size: 297B

.data Size: 18KB - Virtual size: 20KB

.rsrc Size: 183KB - Virtual size: 182KB

.reloc Size: 27KB - Virtual size: 26KB

244f9b8f61fbb054334418ba678d871c

Headers

File Characteristics

Imports

kernel32

msvcrt

winmm

advapi32

user32

ole32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 512B - Virtual size: 308B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

1dbce2677ed0e9df3b7a82b88863a3d4

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

ole32

ksproxy.ax

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 248B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

6b2b65bafa0dd0cf733b55e44cdea375

Headers

DLL Characteristics

File Characteristics

PDB Paths

.text
Size: 43KB - Virtual size: 43KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 241KB - Virtual size: 240KB

.orpc
Size: 512B - Virtual size: 297B

.data
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 183KB - Virtual size: 182KB

.reloc
Size: 27KB - Virtual size: 26KB

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 512B - Virtual size: 308B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 248B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 256B - Virtual size: 211B

.data
Size: 128B - Virtual size: 52B

.edata
Size: 896B - Virtual size: 834B

PAGECONS
Size: 768B - Virtual size: 652B

INIT
Size: 768B - Virtual size: 674B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 278B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 768B - Virtual size: 761B

.data
Size: 1024B - Virtual size: 980B

PAGECONS
Size: 256B - Virtual size: 144B

INIT
Size: 640B - Virtual size: 554B

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 436B

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 232B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 35KB

.data
Size: 512B - Virtual size: 256B